./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:15:02,940 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:15:02,941 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:15:03,000 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:15:03,001 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:15:03,003 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:15:03,006 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:15:03,008 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:15:03,009 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:15:03,013 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:15:03,014 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:15:03,015 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:15:03,015 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:15:03,017 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:15:03,018 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:15:03,020 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:15:03,021 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:15:03,021 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:15:03,023 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:15:03,027 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:15:03,028 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:15:03,029 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:15:03,030 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:15:03,030 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:15:03,034 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:15:03,034 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:15:03,034 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:15:03,035 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:15:03,036 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:15:03,036 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:15:03,037 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:15:03,037 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:15:03,038 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:15:03,039 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:15:03,040 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:15:03,040 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:15:03,040 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:15:03,041 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:15:03,041 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:15:03,041 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:15:03,042 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:15:03,043 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:15:03,065 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:15:03,065 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:15:03,066 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:15:03,066 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:15:03,066 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:15:03,067 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:15:03,067 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:15:03,067 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:15:03,067 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:15:03,068 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:15:03,068 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:15:03,068 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:15:03,068 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:15:03,069 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:15:03,069 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:15:03,069 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:15:03,069 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:15:03,069 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:15:03,069 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:15:03,069 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:15:03,070 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:15:03,070 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:15:03,070 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:15:03,070 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:15:03,070 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:15:03,070 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:15:03,071 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:15:03,071 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:15:03,071 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:15:03,071 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:15:03,071 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:15:03,072 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:15:03,072 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:15:03,072 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:15:03,072 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf [2021-12-21 13:15:03,239 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:15:03,256 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:15:03,258 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:15:03,258 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:15:03,259 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:15:03,259 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2021-12-21 13:15:03,321 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d455b1ace/dc1a13e87c7940f4bb15e1485205a08c/FLAGa82c7c858 [2021-12-21 13:15:03,720 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:15:03,721 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2021-12-21 13:15:03,736 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d455b1ace/dc1a13e87c7940f4bb15e1485205a08c/FLAGa82c7c858 [2021-12-21 13:15:03,744 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d455b1ace/dc1a13e87c7940f4bb15e1485205a08c [2021-12-21 13:15:03,746 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:15:03,746 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:15:03,750 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:15:03,750 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:15:03,752 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:15:03,753 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:15:03" (1/1) ... [2021-12-21 13:15:03,754 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4bf0c002 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:03, skipping insertion in model container [2021-12-21 13:15:03,754 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:15:03" (1/1) ... [2021-12-21 13:15:03,758 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:15:03,788 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:15:03,930 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2021-12-21 13:15:04,042 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:15:04,050 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:15:04,076 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2021-12-21 13:15:04,127 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:15:04,143 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:15:04,143 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:04 WrapperNode [2021-12-21 13:15:04,143 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:15:04,144 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:15:04,144 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:15:04,144 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:15:04,149 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:04" (1/1) ... [2021-12-21 13:15:04,173 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:04" (1/1) ... [2021-12-21 13:15:04,206 INFO L137 Inliner]: procedures = 59, calls = 163, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 281 [2021-12-21 13:15:04,206 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:15:04,207 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:15:04,207 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:15:04,207 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:15:04,213 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:04" (1/1) ... [2021-12-21 13:15:04,214 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:04" (1/1) ... [2021-12-21 13:15:04,220 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:04" (1/1) ... [2021-12-21 13:15:04,221 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:04" (1/1) ... [2021-12-21 13:15:04,232 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:04" (1/1) ... [2021-12-21 13:15:04,242 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:04" (1/1) ... [2021-12-21 13:15:04,244 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:04" (1/1) ... [2021-12-21 13:15:04,248 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:15:04,250 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:15:04,250 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:15:04,250 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:15:04,251 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:04" (1/1) ... [2021-12-21 13:15:04,256 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:15:04,264 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:04,275 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:15:04,304 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:15:04,322 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:15:04,322 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:15:04,322 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:15:04,322 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-21 13:15:04,322 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-21 13:15:04,323 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:15:04,323 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:15:04,323 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:15:04,323 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:15:04,323 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:15:04,323 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:15:04,323 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:15:04,324 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:15:04,324 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:15:04,324 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:15:04,324 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-21 13:15:04,324 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-21 13:15:04,324 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-21 13:15:04,324 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-21 13:15:04,325 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:15:04,325 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:15:04,325 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:15:04,325 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:15:04,325 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:15:04,389 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:15:04,390 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:15:04,684 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:15:04,694 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:15:04,694 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:15:04,695 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:15:04 BoogieIcfgContainer [2021-12-21 13:15:04,696 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:15:04,698 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:15:04,699 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:15:04,701 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:15:04,701 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:15:03" (1/3) ... [2021-12-21 13:15:04,702 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@cafd789 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:15:04, skipping insertion in model container [2021-12-21 13:15:04,702 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:04" (2/3) ... [2021-12-21 13:15:04,702 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@cafd789 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:15:04, skipping insertion in model container [2021-12-21 13:15:04,703 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:15:04" (3/3) ... [2021-12-21 13:15:04,704 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product63.cil.c [2021-12-21 13:15:04,707 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:15:04,707 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:15:04,737 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:15:04,742 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:15:04,742 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:15:04,760 INFO L276 IsEmpty]: Start isEmpty. Operand has 114 states, 83 states have (on average 1.3734939759036144) internal successors, (114), 94 states have internal predecessors, (114), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2021-12-21 13:15:04,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-21 13:15:04,765 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:04,765 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:04,765 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:04,769 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:04,769 INFO L85 PathProgramCache]: Analyzing trace with hash -1947167556, now seen corresponding path program 1 times [2021-12-21 13:15:04,788 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:04,789 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1117201500] [2021-12-21 13:15:04,789 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:04,795 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:04,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-21 13:15:05,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,024 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:05,024 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:05,025 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1117201500] [2021-12-21 13:15:05,025 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1117201500] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:05,026 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:05,026 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:15:05,027 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1447171132] [2021-12-21 13:15:05,028 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:05,031 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:15:05,031 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:05,054 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:15:05,055 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:15:05,058 INFO L87 Difference]: Start difference. First operand has 114 states, 83 states have (on average 1.3734939759036144) internal successors, (114), 94 states have internal predecessors, (114), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:05,104 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:05,104 INFO L93 Difference]: Finished difference Result 219 states and 298 transitions. [2021-12-21 13:15:05,105 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:15:05,106 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-21 13:15:05,106 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:05,119 INFO L225 Difference]: With dead ends: 219 [2021-12-21 13:15:05,119 INFO L226 Difference]: Without dead ends: 105 [2021-12-21 13:15:05,123 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:15:05,126 INFO L933 BasicCegarLoop]: 146 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:05,127 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:05,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2021-12-21 13:15:05,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 105. [2021-12-21 13:15:05,172 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 76 states have (on average 1.3157894736842106) internal successors, (100), 86 states have internal predecessors, (100), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-21 13:15:05,177 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 137 transitions. [2021-12-21 13:15:05,178 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 137 transitions. Word has length 25 [2021-12-21 13:15:05,179 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:05,179 INFO L470 AbstractCegarLoop]: Abstraction has 105 states and 137 transitions. [2021-12-21 13:15:05,179 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:05,180 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 137 transitions. [2021-12-21 13:15:05,183 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-21 13:15:05,184 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:05,184 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:05,184 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:15:05,185 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:05,187 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:05,188 INFO L85 PathProgramCache]: Analyzing trace with hash -1638616570, now seen corresponding path program 1 times [2021-12-21 13:15:05,188 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:05,188 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1224397855] [2021-12-21 13:15:05,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:05,189 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:05,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 13:15:05,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,248 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:05,248 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:05,248 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1224397855] [2021-12-21 13:15:05,248 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1224397855] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:05,248 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:05,248 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:15:05,249 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1889834195] [2021-12-21 13:15:05,249 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:05,260 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:15:05,260 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:05,260 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:15:05,261 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:15:05,261 INFO L87 Difference]: Start difference. First operand 105 states and 137 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:05,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:05,276 INFO L93 Difference]: Finished difference Result 171 states and 223 transitions. [2021-12-21 13:15:05,277 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:15:05,277 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-21 13:15:05,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:05,280 INFO L225 Difference]: With dead ends: 171 [2021-12-21 13:15:05,280 INFO L226 Difference]: Without dead ends: 96 [2021-12-21 13:15:05,281 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:15:05,284 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 16 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 227 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:05,285 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 227 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:05,285 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2021-12-21 13:15:05,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2021-12-21 13:15:05,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 70 states have (on average 1.3285714285714285) internal successors, (93), 80 states have internal predecessors, (93), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-21 13:15:05,293 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 125 transitions. [2021-12-21 13:15:05,293 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 125 transitions. Word has length 26 [2021-12-21 13:15:05,294 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:05,294 INFO L470 AbstractCegarLoop]: Abstraction has 96 states and 125 transitions. [2021-12-21 13:15:05,294 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:05,294 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 125 transitions. [2021-12-21 13:15:05,295 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-21 13:15:05,295 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:05,295 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:05,295 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:15:05,295 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:05,296 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:05,296 INFO L85 PathProgramCache]: Analyzing trace with hash 1033007084, now seen corresponding path program 1 times [2021-12-21 13:15:05,296 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:05,296 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [296953818] [2021-12-21 13:15:05,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:05,297 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:05,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:05,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,382 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:05,383 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:05,383 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [296953818] [2021-12-21 13:15:05,383 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [296953818] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:05,383 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:05,383 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:15:05,383 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [845762344] [2021-12-21 13:15:05,384 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:05,384 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:15:05,384 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:05,384 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:15:05,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:15:05,385 INFO L87 Difference]: Start difference. First operand 96 states and 125 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:05,559 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:05,560 INFO L93 Difference]: Finished difference Result 314 states and 416 transitions. [2021-12-21 13:15:05,560 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-21 13:15:05,560 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2021-12-21 13:15:05,560 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:05,562 INFO L225 Difference]: With dead ends: 314 [2021-12-21 13:15:05,562 INFO L226 Difference]: Without dead ends: 226 [2021-12-21 13:15:05,563 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:15:05,564 INFO L933 BasicCegarLoop]: 153 mSDtfsCounter, 258 mSDsluCounter, 419 mSDsCounter, 0 mSdLazyCounter, 145 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 258 SdHoareTripleChecker+Valid, 572 SdHoareTripleChecker+Invalid, 159 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:05,564 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [258 Valid, 572 Invalid, 159 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 145 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:05,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 226 states. [2021-12-21 13:15:05,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 226 to 220. [2021-12-21 13:15:05,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 220 states, 159 states have (on average 1.3584905660377358) internal successors, (216), 181 states have internal predecessors, (216), 37 states have call successors, (37), 23 states have call predecessors, (37), 23 states have return successors, (38), 25 states have call predecessors, (38), 37 states have call successors, (38) [2021-12-21 13:15:05,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 220 states to 220 states and 291 transitions. [2021-12-21 13:15:05,583 INFO L78 Accepts]: Start accepts. Automaton has 220 states and 291 transitions. Word has length 30 [2021-12-21 13:15:05,584 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:05,584 INFO L470 AbstractCegarLoop]: Abstraction has 220 states and 291 transitions. [2021-12-21 13:15:05,584 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:05,584 INFO L276 IsEmpty]: Start isEmpty. Operand 220 states and 291 transitions. [2021-12-21 13:15:05,585 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-21 13:15:05,585 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:05,585 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:05,585 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:15:05,586 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:05,586 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:05,586 INFO L85 PathProgramCache]: Analyzing trace with hash -1394669962, now seen corresponding path program 1 times [2021-12-21 13:15:05,586 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:05,587 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1934728639] [2021-12-21 13:15:05,587 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:05,587 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:05,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:15:05,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,654 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:05,655 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:05,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1934728639] [2021-12-21 13:15:05,655 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1934728639] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:05,655 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:05,655 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:15:05,661 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [112051055] [2021-12-21 13:15:05,662 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:05,663 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:15:05,663 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:05,664 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:15:05,664 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:15:05,664 INFO L87 Difference]: Start difference. First operand 220 states and 291 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:05,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:05,727 INFO L93 Difference]: Finished difference Result 542 states and 733 transitions. [2021-12-21 13:15:05,727 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-21 13:15:05,728 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2021-12-21 13:15:05,728 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:05,731 INFO L225 Difference]: With dead ends: 542 [2021-12-21 13:15:05,731 INFO L226 Difference]: Without dead ends: 330 [2021-12-21 13:15:05,732 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:15:05,733 INFO L933 BasicCegarLoop]: 128 mSDtfsCounter, 95 mSDsluCounter, 338 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 466 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:05,733 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [95 Valid, 466 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:05,734 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 330 states. [2021-12-21 13:15:05,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 330 to 313. [2021-12-21 13:15:05,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 313 states, 228 states have (on average 1.2894736842105263) internal successors, (294), 249 states have internal predecessors, (294), 46 states have call successors, (46), 38 states have call predecessors, (46), 38 states have return successors, (60), 41 states have call predecessors, (60), 46 states have call successors, (60) [2021-12-21 13:15:05,755 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 313 states to 313 states and 400 transitions. [2021-12-21 13:15:05,756 INFO L78 Accepts]: Start accepts. Automaton has 313 states and 400 transitions. Word has length 34 [2021-12-21 13:15:05,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:05,756 INFO L470 AbstractCegarLoop]: Abstraction has 313 states and 400 transitions. [2021-12-21 13:15:05,756 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:05,756 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 400 transitions. [2021-12-21 13:15:05,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-21 13:15:05,757 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:05,757 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:05,757 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:15:05,758 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:05,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:05,758 INFO L85 PathProgramCache]: Analyzing trace with hash -261508897, now seen corresponding path program 1 times [2021-12-21 13:15:05,758 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:05,758 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [790047747] [2021-12-21 13:15:05,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:05,758 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:05,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:05,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:05,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:05,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:05,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-21 13:15:05,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:05,843 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:15:05,844 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:05,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [790047747] [2021-12-21 13:15:05,848 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [790047747] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:05,849 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:05,849 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:15:05,849 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [997397231] [2021-12-21 13:15:05,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:05,850 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:15:05,850 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:05,851 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:15:05,851 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:15:05,851 INFO L87 Difference]: Start difference. First operand 313 states and 400 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:15:05,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:05,999 INFO L93 Difference]: Finished difference Result 690 states and 909 transitions. [2021-12-21 13:15:05,999 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:15:05,999 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2021-12-21 13:15:05,999 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:06,001 INFO L225 Difference]: With dead ends: 690 [2021-12-21 13:15:06,001 INFO L226 Difference]: Without dead ends: 385 [2021-12-21 13:15:06,002 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:15:06,003 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 79 mSDsluCounter, 327 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 435 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:06,003 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [84 Valid, 435 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:06,004 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 385 states. [2021-12-21 13:15:06,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 385 to 373. [2021-12-21 13:15:06,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 373 states, 274 states have (on average 1.27007299270073) internal successors, (348), 295 states have internal predecessors, (348), 50 states have call successors, (50), 38 states have call predecessors, (50), 48 states have return successors, (74), 53 states have call predecessors, (74), 50 states have call successors, (74) [2021-12-21 13:15:06,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 373 states to 373 states and 472 transitions. [2021-12-21 13:15:06,025 INFO L78 Accepts]: Start accepts. Automaton has 373 states and 472 transitions. Word has length 61 [2021-12-21 13:15:06,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:06,025 INFO L470 AbstractCegarLoop]: Abstraction has 373 states and 472 transitions. [2021-12-21 13:15:06,026 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:15:06,026 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 472 transitions. [2021-12-21 13:15:06,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-21 13:15:06,027 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:06,027 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:06,027 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:15:06,027 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:06,028 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:06,028 INFO L85 PathProgramCache]: Analyzing trace with hash -333895455, now seen corresponding path program 1 times [2021-12-21 13:15:06,028 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:06,028 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1278768365] [2021-12-21 13:15:06,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:06,028 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:06,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:06,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:06,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:06,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:06,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-21 13:15:06,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,107 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:15:06,108 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:06,108 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1278768365] [2021-12-21 13:15:06,108 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1278768365] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:06,108 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:06,108 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:15:06,108 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [998168736] [2021-12-21 13:15:06,108 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:06,108 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:15:06,108 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:06,109 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:15:06,109 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:15:06,109 INFO L87 Difference]: Start difference. First operand 373 states and 472 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:15:06,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:06,253 INFO L93 Difference]: Finished difference Result 756 states and 985 transitions. [2021-12-21 13:15:06,254 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:15:06,254 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2021-12-21 13:15:06,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:06,256 INFO L225 Difference]: With dead ends: 756 [2021-12-21 13:15:06,256 INFO L226 Difference]: Without dead ends: 391 [2021-12-21 13:15:06,257 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:15:06,258 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 121 mSDsluCounter, 370 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 478 SdHoareTripleChecker+Invalid, 225 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:06,258 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [127 Valid, 478 Invalid, 225 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:06,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 391 states. [2021-12-21 13:15:06,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 391 to 377. [2021-12-21 13:15:06,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 278 states have (on average 1.2661870503597121) internal successors, (352), 299 states have internal predecessors, (352), 50 states have call successors, (50), 38 states have call predecessors, (50), 48 states have return successors, (74), 53 states have call predecessors, (74), 50 states have call successors, (74) [2021-12-21 13:15:06,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 476 transitions. [2021-12-21 13:15:06,286 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 476 transitions. Word has length 61 [2021-12-21 13:15:06,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:06,287 INFO L470 AbstractCegarLoop]: Abstraction has 377 states and 476 transitions. [2021-12-21 13:15:06,287 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:15:06,287 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 476 transitions. [2021-12-21 13:15:06,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-21 13:15:06,288 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:06,288 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:06,288 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:15:06,288 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:06,289 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:06,289 INFO L85 PathProgramCache]: Analyzing trace with hash -1177900957, now seen corresponding path program 1 times [2021-12-21 13:15:06,289 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:06,289 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1371868866] [2021-12-21 13:15:06,289 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:06,289 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:06,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:06,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:06,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:06,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:06,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-21 13:15:06,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,395 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:15:06,395 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:06,395 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1371868866] [2021-12-21 13:15:06,395 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1371868866] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:06,395 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:06,395 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:15:06,395 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1524426604] [2021-12-21 13:15:06,395 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:06,396 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:15:06,396 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:06,397 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:15:06,397 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:15:06,397 INFO L87 Difference]: Start difference. First operand 377 states and 476 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-21 13:15:06,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:06,595 INFO L93 Difference]: Finished difference Result 1076 states and 1414 transitions. [2021-12-21 13:15:06,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:15:06,595 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2021-12-21 13:15:06,595 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:06,598 INFO L225 Difference]: With dead ends: 1076 [2021-12-21 13:15:06,599 INFO L226 Difference]: Without dead ends: 707 [2021-12-21 13:15:06,599 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 12 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:15:06,602 INFO L933 BasicCegarLoop]: 164 mSDtfsCounter, 246 mSDsluCounter, 210 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 254 SdHoareTripleChecker+Valid, 374 SdHoareTripleChecker+Invalid, 258 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:06,603 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [254 Valid, 374 Invalid, 258 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 179 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:06,604 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 707 states. [2021-12-21 13:15:06,631 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 707 to 700. [2021-12-21 13:15:06,632 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 700 states, 518 states have (on average 1.2413127413127414) internal successors, (643), 551 states have internal predecessors, (643), 93 states have call successors, (93), 83 states have call predecessors, (93), 88 states have return successors, (152), 93 states have call predecessors, (152), 93 states have call successors, (152) [2021-12-21 13:15:06,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 700 states to 700 states and 888 transitions. [2021-12-21 13:15:06,635 INFO L78 Accepts]: Start accepts. Automaton has 700 states and 888 transitions. Word has length 61 [2021-12-21 13:15:06,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:06,636 INFO L470 AbstractCegarLoop]: Abstraction has 700 states and 888 transitions. [2021-12-21 13:15:06,636 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-21 13:15:06,636 INFO L276 IsEmpty]: Start isEmpty. Operand 700 states and 888 transitions. [2021-12-21 13:15:06,637 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-21 13:15:06,637 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:06,637 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:06,637 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:15:06,637 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:06,638 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:06,638 INFO L85 PathProgramCache]: Analyzing trace with hash 1002671561, now seen corresponding path program 1 times [2021-12-21 13:15:06,638 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:06,640 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [804890314] [2021-12-21 13:15:06,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:06,640 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:06,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:06,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:15:06,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:06,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:06,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:06,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-21 13:15:06,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:06,789 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:15:06,789 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:06,789 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [804890314] [2021-12-21 13:15:06,789 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [804890314] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:06,789 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:06,789 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-12-21 13:15:06,789 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [613842839] [2021-12-21 13:15:06,790 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:06,790 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-21 13:15:06,790 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:06,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-21 13:15:06,791 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:15:06,791 INFO L87 Difference]: Start difference. First operand 700 states and 888 transitions. Second operand has 12 states, 12 states have (on average 4.166666666666667) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-21 13:15:07,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:07,551 INFO L93 Difference]: Finished difference Result 2275 states and 3020 transitions. [2021-12-21 13:15:07,552 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-21 13:15:07,552 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.166666666666667) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2021-12-21 13:15:07,552 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:07,558 INFO L225 Difference]: With dead ends: 2275 [2021-12-21 13:15:07,558 INFO L226 Difference]: Without dead ends: 1583 [2021-12-21 13:15:07,560 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2021-12-21 13:15:07,560 INFO L933 BasicCegarLoop]: 118 mSDtfsCounter, 557 mSDsluCounter, 545 mSDsCounter, 0 mSdLazyCounter, 839 mSolverCounterSat, 326 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 566 SdHoareTripleChecker+Valid, 663 SdHoareTripleChecker+Invalid, 1165 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 326 IncrementalHoareTripleChecker+Valid, 839 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:07,560 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [566 Valid, 663 Invalid, 1165 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [326 Valid, 839 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-21 13:15:07,561 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1583 states. [2021-12-21 13:15:07,599 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1583 to 1478. [2021-12-21 13:15:07,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1478 states, 1077 states have (on average 1.2079851439182916) internal successors, (1301), 1158 states have internal predecessors, (1301), 212 states have call successors, (212), 162 states have call predecessors, (212), 188 states have return successors, (387), 210 states have call predecessors, (387), 212 states have call successors, (387) [2021-12-21 13:15:07,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1478 states to 1478 states and 1900 transitions. [2021-12-21 13:15:07,606 INFO L78 Accepts]: Start accepts. Automaton has 1478 states and 1900 transitions. Word has length 65 [2021-12-21 13:15:07,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:07,606 INFO L470 AbstractCegarLoop]: Abstraction has 1478 states and 1900 transitions. [2021-12-21 13:15:07,606 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.166666666666667) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-21 13:15:07,606 INFO L276 IsEmpty]: Start isEmpty. Operand 1478 states and 1900 transitions. [2021-12-21 13:15:07,609 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2021-12-21 13:15:07,609 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:07,610 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:07,610 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:15:07,610 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:07,610 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:07,610 INFO L85 PathProgramCache]: Analyzing trace with hash -936110750, now seen corresponding path program 1 times [2021-12-21 13:15:07,610 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:07,610 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [247692614] [2021-12-21 13:15:07,610 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:07,611 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:07,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:07,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:15:07,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:15:07,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:15:07,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:07,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:07,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:07,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-21 13:15:07,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2021-12-21 13:15:07,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2021-12-21 13:15:07,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:07,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-12-21 13:15:07,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:15:07,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:07,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 117 [2021-12-21 13:15:07,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,813 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 18 proven. 15 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2021-12-21 13:15:07,813 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:07,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [247692614] [2021-12-21 13:15:07,813 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [247692614] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:07,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1530806126] [2021-12-21 13:15:07,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:07,814 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:07,814 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:07,815 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:07,847 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:15:07,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:07,924 INFO L263 TraceCheckSpWp]: Trace formula consists of 546 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-21 13:15:07,933 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:08,225 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2021-12-21 13:15:08,225 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:15:08,226 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1530806126] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:08,226 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:15:08,226 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [16] total 21 [2021-12-21 13:15:08,226 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [388445563] [2021-12-21 13:15:08,226 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:08,226 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-21 13:15:08,226 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:08,227 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-21 13:15:08,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=366, Unknown=0, NotChecked=0, Total=420 [2021-12-21 13:15:08,227 INFO L87 Difference]: Start difference. First operand 1478 states and 1900 transitions. Second operand has 8 states, 8 states have (on average 10.875) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-21 13:15:08,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:08,390 INFO L93 Difference]: Finished difference Result 2952 states and 3800 transitions. [2021-12-21 13:15:08,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-21 13:15:08,391 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.875) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 127 [2021-12-21 13:15:08,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:08,396 INFO L225 Difference]: With dead ends: 2952 [2021-12-21 13:15:08,396 INFO L226 Difference]: Without dead ends: 1482 [2021-12-21 13:15:08,399 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 169 GetRequests, 150 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=366, Unknown=0, NotChecked=0, Total=420 [2021-12-21 13:15:08,400 INFO L933 BasicCegarLoop]: 228 mSDtfsCounter, 85 mSDsluCounter, 943 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 1171 SdHoareTripleChecker+Invalid, 221 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:08,400 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [89 Valid, 1171 Invalid, 221 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:08,401 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1482 states. [2021-12-21 13:15:08,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1482 to 1478. [2021-12-21 13:15:08,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1478 states, 1077 states have (on average 1.1940575673166203) internal successors, (1286), 1158 states have internal predecessors, (1286), 212 states have call successors, (212), 162 states have call predecessors, (212), 188 states have return successors, (344), 210 states have call predecessors, (344), 212 states have call successors, (344) [2021-12-21 13:15:08,465 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1478 states to 1478 states and 1842 transitions. [2021-12-21 13:15:08,465 INFO L78 Accepts]: Start accepts. Automaton has 1478 states and 1842 transitions. Word has length 127 [2021-12-21 13:15:08,466 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:08,466 INFO L470 AbstractCegarLoop]: Abstraction has 1478 states and 1842 transitions. [2021-12-21 13:15:08,466 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.875) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-21 13:15:08,466 INFO L276 IsEmpty]: Start isEmpty. Operand 1478 states and 1842 transitions. [2021-12-21 13:15:08,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2021-12-21 13:15:08,470 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:08,470 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:08,510 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:08,683 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:08,684 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:08,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:08,684 INFO L85 PathProgramCache]: Analyzing trace with hash -921698978, now seen corresponding path program 1 times [2021-12-21 13:15:08,684 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:08,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1284892673] [2021-12-21 13:15:08,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:08,685 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:08,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:08,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:08,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:15:08,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:08,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:08,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:08,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-21 13:15:08,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-21 13:15:08,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-21 13:15:08,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:08,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-21 13:15:08,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:15:08,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:08,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-21 13:15:08,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,832 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2021-12-21 13:15:08,832 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:08,832 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1284892673] [2021-12-21 13:15:08,832 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1284892673] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:08,832 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1304534168] [2021-12-21 13:15:08,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:08,832 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:08,832 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:08,833 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:08,834 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 13:15:08,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:08,921 INFO L263 TraceCheckSpWp]: Trace formula consists of 536 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-21 13:15:08,929 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:09,129 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-21 13:15:09,130 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:15:09,130 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1304534168] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:09,130 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:15:09,130 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2021-12-21 13:15:09,130 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1579711467] [2021-12-21 13:15:09,130 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:09,131 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-21 13:15:09,131 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:09,131 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-21 13:15:09,131 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=330, Unknown=0, NotChecked=0, Total=380 [2021-12-21 13:15:09,132 INFO L87 Difference]: Start difference. First operand 1478 states and 1842 transitions. Second operand has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-21 13:15:09,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:09,251 INFO L93 Difference]: Finished difference Result 2558 states and 3230 transitions. [2021-12-21 13:15:09,251 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-21 13:15:09,252 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 123 [2021-12-21 13:15:09,252 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:09,253 INFO L225 Difference]: With dead ends: 2558 [2021-12-21 13:15:09,253 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:15:09,257 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 143 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2021-12-21 13:15:09,257 INFO L933 BasicCegarLoop]: 213 mSDtfsCounter, 81 mSDsluCounter, 736 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 949 SdHoareTripleChecker+Invalid, 127 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:09,257 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [85 Valid, 949 Invalid, 127 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:09,258 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:15:09,258 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:15:09,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:15:09,258 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:15:09,258 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 123 [2021-12-21 13:15:09,259 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:09,259 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:15:09,259 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-21 13:15:09,259 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:15:09,259 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:15:09,261 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:15:09,281 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:09,474 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-21 13:15:09,475 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:15:12,989 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 521 528) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2021-12-21 13:15:12,990 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 521 528) no Hoare annotation was computed. [2021-12-21 13:15:12,990 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 521 528) no Hoare annotation was computed. [2021-12-21 13:15:12,991 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 411 417) no Hoare annotation was computed. [2021-12-21 13:15:12,991 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 411 417) the Hoare annotation is: true [2021-12-21 13:15:12,991 INFO L854 garLoopResultBuilder]: At program point L459(line 459) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-21 13:15:12,991 INFO L854 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-21 13:15:12,991 INFO L858 garLoopResultBuilder]: For program point L453(lines 453 461) no Hoare annotation was computed. [2021-12-21 13:15:12,991 INFO L858 garLoopResultBuilder]: For program point L449(lines 449 466) no Hoare annotation was computed. [2021-12-21 13:15:12,991 INFO L854 garLoopResultBuilder]: At program point L309(lines 304 312) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-21 13:15:12,992 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 445 469) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-21 13:15:12,992 INFO L854 garLoopResultBuilder]: At program point L464(line 464) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~methaneLevelCritical~0 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2021-12-21 13:15:12,992 INFO L858 garLoopResultBuilder]: For program point L464-1(lines 445 469) no Hoare annotation was computed. [2021-12-21 13:15:12,992 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 445 469) no Hoare annotation was computed. [2021-12-21 13:15:12,992 INFO L854 garLoopResultBuilder]: At program point L619(lines 604 622) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-21 13:15:12,993 INFO L858 garLoopResultBuilder]: For program point L613(lines 613 617) no Hoare annotation was computed. [2021-12-21 13:15:12,999 INFO L858 garLoopResultBuilder]: For program point L613-2(lines 613 617) no Hoare annotation was computed. [2021-12-21 13:15:13,000 INFO L858 garLoopResultBuilder]: For program point L241-1(lines 237 248) no Hoare annotation was computed. [2021-12-21 13:15:13,000 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 237 248) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= ~pumpRunning~0 0)))) (and (or .cse0 .cse1 (= 0 ~systemActive~0)) (or .cse0 .cse2 .cse1) (or (<= 1 ~methaneLevelCritical~0) .cse2 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2021-12-21 13:15:13,000 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 237 248) no Hoare annotation was computed. [2021-12-21 13:15:13,000 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 249 257) the Hoare annotation is: true [2021-12-21 13:15:13,001 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 249 257) no Hoare annotation was computed. [2021-12-21 13:15:13,001 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 249 257) no Hoare annotation was computed. [2021-12-21 13:15:13,002 INFO L854 garLoopResultBuilder]: At program point L481(line 481) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse3) .cse4) (or .cse0 .cse2) (or .cse3 .cse1 .cse4))) [2021-12-21 13:15:13,002 INFO L854 garLoopResultBuilder]: At program point L477(line 477) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse0 .cse3) (or .cse2 .cse1 .cse4))) [2021-12-21 13:15:13,002 INFO L858 garLoopResultBuilder]: For program point L477-1(line 477) no Hoare annotation was computed. [2021-12-21 13:15:13,003 INFO L858 garLoopResultBuilder]: For program point L188(lines 188 198) no Hoare annotation was computed. [2021-12-21 13:15:13,003 INFO L858 garLoopResultBuilder]: For program point L217(lines 217 221) no Hoare annotation was computed. [2021-12-21 13:15:13,003 INFO L858 garLoopResultBuilder]: For program point L184(lines 184 201) no Hoare annotation was computed. [2021-12-21 13:15:13,003 INFO L854 garLoopResultBuilder]: At program point L217-2(lines 213 224) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse0 .cse3) (or .cse2 .cse1 .cse4))) [2021-12-21 13:15:13,004 INFO L854 garLoopResultBuilder]: At program point L184-1(lines 176 204) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not .cse3)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse7 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or .cse4 (and .cse5 .cse2) .cse6 (and .cse1 .cse5 .cse7)) (or .cse4 (and .cse1 .cse5) .cse0) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7) (and .cse1 .cse2 .cse7) .cse6 (and (<= 2 ~waterLevel~0) .cse7) .cse3)))) [2021-12-21 13:15:13,004 INFO L854 garLoopResultBuilder]: At program point L490(line 490) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0))) (let ((.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~pumpRunning~0 0)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (not .cse1)) (.cse11 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not .cse11)) (.cse2 (and .cse6 .cse7 .cse11 .cse9 .cse10)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not .cse8)) (.cse5 (and .cse6 .cse7 .cse8 .cse9 .cse10))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse0 .cse2) (or .cse3 .cse4 .cse5) (or .cse4 .cse5 .cse1))))) [2021-12-21 13:15:13,004 INFO L854 garLoopResultBuilder]: At program point L490-1(lines 471 495) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= |old(~waterLevel~0)| ~waterLevel~0) (not .cse5))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse4) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (<= 2 ~waterLevel~0) .cse2 .cse5)))) [2021-12-21 13:15:13,004 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 387 410) no Hoare annotation was computed. [2021-12-21 13:15:13,005 INFO L858 garLoopResultBuilder]: For program point L391-1(lines 390 409) no Hoare annotation was computed. [2021-12-21 13:15:13,005 INFO L858 garLoopResultBuilder]: For program point L160(line 160) no Hoare annotation was computed. [2021-12-21 13:15:13,006 INFO L858 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2021-12-21 13:15:13,006 INFO L854 garLoopResultBuilder]: At program point L545(lines 540 548) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or (and .cse2 .cse3) .cse4 .cse5) (or .cse0 .cse4 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse1 .cse5))) [2021-12-21 13:15:13,006 INFO L854 garLoopResultBuilder]: At program point L161(lines 156 163) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse2 .cse0) (or .cse3 .cse1))) [2021-12-21 13:15:13,006 INFO L858 garLoopResultBuilder]: For program point L479(lines 479 487) no Hoare annotation was computed. [2021-12-21 13:15:13,006 INFO L858 garLoopResultBuilder]: For program point L475(lines 475 492) no Hoare annotation was computed. [2021-12-21 13:15:13,006 INFO L854 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and .cse0 .cse4)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 (and .cse4 (not .cse2)) .cse5 .cse6) (or .cse3 .cse5 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (<= 2 ~waterLevel~0) .cse6 .cse2)))) [2021-12-21 13:15:13,007 INFO L858 garLoopResultBuilder]: For program point L182-1(line 182) no Hoare annotation was computed. [2021-12-21 13:15:13,007 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 387 410) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 0) .cse6)) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2)))) [2021-12-21 13:15:13,007 INFO L858 garLoopResultBuilder]: For program point L398-1(lines 398 404) no Hoare annotation was computed. [2021-12-21 13:15:13,007 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 387 410) no Hoare annotation was computed. [2021-12-21 13:15:13,007 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 160) no Hoare annotation was computed. [2021-12-21 13:15:13,008 INFO L854 garLoopResultBuilder]: At program point L485(line 485) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse2 .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse1))) [2021-12-21 13:15:13,008 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2021-12-21 13:15:13,008 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2021-12-21 13:15:13,008 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2021-12-21 13:15:13,008 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2021-12-21 13:15:13,008 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2021-12-21 13:15:13,008 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2021-12-21 13:15:13,009 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2021-12-21 13:15:13,009 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2021-12-21 13:15:13,009 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2021-12-21 13:15:13,009 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-12-21 13:15:13,009 INFO L861 garLoopResultBuilder]: At program point L126(lines 118 128) the Hoare annotation is: true [2021-12-21 13:15:13,009 INFO L858 garLoopResultBuilder]: For program point L345(lines 345 351) no Hoare annotation was computed. [2021-12-21 13:15:13,009 INFO L858 garLoopResultBuilder]: For program point L345-1(lines 345 351) no Hoare annotation was computed. [2021-12-21 13:15:13,010 INFO L861 garLoopResultBuilder]: At program point L151(lines 132 154) the Hoare annotation is: true [2021-12-21 13:15:13,011 INFO L854 garLoopResultBuilder]: At program point L370(lines 325 372) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2021-12-21 13:15:13,011 INFO L854 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2021-12-21 13:15:13,011 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:15:13,011 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:15:13,012 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:15:13,012 INFO L854 garLoopResultBuilder]: At program point L635(lines 623 637) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3))) [2021-12-21 13:15:13,012 INFO L858 garLoopResultBuilder]: For program point L627(lines 627 633) no Hoare annotation was computed. [2021-12-21 13:15:13,012 INFO L858 garLoopResultBuilder]: For program point L627-1(lines 627 633) no Hoare annotation was computed. [2021-12-21 13:15:13,012 INFO L854 garLoopResultBuilder]: At program point L173(lines 168 175) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:13,012 INFO L858 garLoopResultBuilder]: For program point L326(lines 325 372) no Hoare annotation was computed. [2021-12-21 13:15:13,012 INFO L858 garLoopResultBuilder]: For program point L355(lines 355 368) no Hoare annotation was computed. [2021-12-21 13:15:13,012 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:15:13,013 INFO L854 garLoopResultBuilder]: At program point L669(lines 664 672) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:13,013 INFO L854 garLoopResultBuilder]: At program point L347(line 347) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2021-12-21 13:15:13,013 INFO L861 garLoopResultBuilder]: At program point L376(lines 315 380) the Hoare annotation is: true [2021-12-21 13:15:13,013 INFO L854 garLoopResultBuilder]: At program point L661(lines 657 663) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:13,013 INFO L858 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2021-12-21 13:15:13,013 INFO L858 garLoopResultBuilder]: For program point L335-1(lines 335 341) no Hoare annotation was computed. [2021-12-21 13:15:13,013 INFO L858 garLoopResultBuilder]: For program point L327(lines 327 331) no Hoare annotation was computed. [2021-12-21 13:15:13,014 INFO L854 garLoopResultBuilder]: At program point L629(line 629) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2021-12-21 13:15:13,014 INFO L854 garLoopResultBuilder]: At program point L373(lines 324 374) the Hoare annotation is: false [2021-12-21 13:15:13,014 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:13,014 INFO L854 garLoopResultBuilder]: At program point L654(lines 650 656) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:13,014 INFO L858 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2021-12-21 13:15:13,014 INFO L858 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2021-12-21 13:15:13,014 INFO L858 garLoopResultBuilder]: For program point L361(lines 361 367) no Hoare annotation was computed. [2021-12-21 13:15:13,014 INFO L854 garLoopResultBuilder]: At program point L361-2(lines 355 368) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse6 .cse1 .cse2 .cse3 .cse4))) [2021-12-21 13:15:13,015 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 419 443) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-21 13:15:13,015 INFO L854 garLoopResultBuilder]: At program point L438(line 438) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-21 13:15:13,015 INFO L858 garLoopResultBuilder]: For program point L438-1(lines 419 443) no Hoare annotation was computed. [2021-12-21 13:15:13,015 INFO L858 garLoopResultBuilder]: For program point L294(lines 294 300) no Hoare annotation was computed. [2021-12-21 13:15:13,015 INFO L858 garLoopResultBuilder]: For program point L511(lines 511 517) no Hoare annotation was computed. [2021-12-21 13:15:13,015 INFO L854 garLoopResultBuilder]: At program point L509(line 509) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2021-12-21 13:15:13,015 INFO L854 garLoopResultBuilder]: At program point L511-2(lines 504 520) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) .cse0 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2021-12-21 13:15:13,015 INFO L858 garLoopResultBuilder]: For program point L509-1(line 509) no Hoare annotation was computed. [2021-12-21 13:15:13,016 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 419 443) no Hoare annotation was computed. [2021-12-21 13:15:13,016 INFO L854 garLoopResultBuilder]: At program point L600(lines 585 603) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0))) (let ((.cse0 (and .cse3 .cse4 (<= 2 ~waterLevel~0))) (.cse1 (and .cse3 .cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2)))) [2021-12-21 13:15:13,016 INFO L854 garLoopResultBuilder]: At program point L501(lines 496 503) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-21 13:15:13,016 INFO L858 garLoopResultBuilder]: For program point L594(lines 594 598) no Hoare annotation was computed. [2021-12-21 13:15:13,016 INFO L854 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1))) [2021-12-21 13:15:13,016 INFO L858 garLoopResultBuilder]: For program point L594-2(lines 594 598) no Hoare annotation was computed. [2021-12-21 13:15:13,016 INFO L854 garLoopResultBuilder]: At program point L299(lines 290 303) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0))) (let ((.cse0 (and .cse2 .cse3 (<= 2 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse1 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|))) (and (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) .cse4) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and .cse1 .cse3))))) [2021-12-21 13:15:13,016 INFO L858 garLoopResultBuilder]: For program point L427(lines 427 435) no Hoare annotation was computed. [2021-12-21 13:15:13,017 INFO L858 garLoopResultBuilder]: For program point L423(lines 423 440) no Hoare annotation was computed. [2021-12-21 13:15:13,017 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 225 236) no Hoare annotation was computed. [2021-12-21 13:15:13,017 INFO L858 garLoopResultBuilder]: For program point L229-1(lines 225 236) no Hoare annotation was computed. [2021-12-21 13:15:13,017 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 225 236) the Hoare annotation is: (let ((.cse2 (not (= ~pumpRunning~0 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (= 0 ~systemActive~0)) (or .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse2 .cse0 .cse1))) [2021-12-21 13:15:13,017 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 529 539) the Hoare annotation is: true [2021-12-21 13:15:13,017 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 529 539) no Hoare annotation was computed. [2021-12-21 13:15:13,017 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 529 539) no Hoare annotation was computed. [2021-12-21 13:15:13,018 INFO L861 garLoopResultBuilder]: At program point L534(line 534) the Hoare annotation is: true [2021-12-21 13:15:13,018 INFO L858 garLoopResultBuilder]: For program point L534-1(line 534) no Hoare annotation was computed. [2021-12-21 13:15:13,020 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:13,021 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:15:13,065 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:15:13 BoogieIcfgContainer [2021-12-21 13:15:13,066 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:15:13,066 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:15:13,066 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:15:13,066 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:15:13,067 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:15:04" (3/4) ... [2021-12-21 13:15:13,069 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:15:13,074 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-21 13:15:13,074 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:15:13,074 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:15:13,074 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-21 13:15:13,074 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:15:13,074 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:15:13,074 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:15:13,075 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:15:13,075 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:15:13,075 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-21 13:15:13,081 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-21 13:15:13,083 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:15:13,083 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:15:13,084 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:15:13,084 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:15:13,084 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:15:13,084 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:15:13,098 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2021-12-21 13:15:13,098 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2021-12-21 13:15:13,098 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2021-12-21 13:15:13,098 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2021-12-21 13:15:13,099 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:13,099 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) && ((pumpRunning == 0 || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:13,100 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= methaneLevelCritical) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && tmp == 0))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) || ((pumpRunning == 0 && !(0 == systemActive)) && tmp == 0)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && tmp == 0)) || 0 == systemActive) [2021-12-21 13:15:13,100 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) [2021-12-21 13:15:13,100 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((pumpRunning == 0 && \result == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (!(methaneLevelCritical == 0) || 0 == systemActive) [2021-12-21 13:15:13,100 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical == tmp)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:13,100 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:13,101 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:13,101 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) || ((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) [2021-12-21 13:15:13,101 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || 0 == systemActive) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && (!(methaneLevelCritical == 0) || 0 == systemActive) [2021-12-21 13:15:13,101 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:13,101 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || 0 == systemActive) [2021-12-21 13:15:13,122 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:15:13,123 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:15:13,123 INFO L158 Benchmark]: Toolchain (without parser) took 9376.58ms. Allocated memory was 83.9MB in the beginning and 188.7MB in the end (delta: 104.9MB). Free memory was 50.8MB in the beginning and 154.6MB in the end (delta: -103.8MB). Peak memory consumption was 1.7MB. Max. memory is 16.1GB. [2021-12-21 13:15:13,123 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 83.9MB. Free memory was 56.5MB in the beginning and 56.4MB in the end (delta: 27.6kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:15:13,123 INFO L158 Benchmark]: CACSL2BoogieTranslator took 393.76ms. Allocated memory was 83.9MB in the beginning and 107.0MB in the end (delta: 23.1MB). Free memory was 50.6MB in the beginning and 76.3MB in the end (delta: -25.6MB). Peak memory consumption was 8.0MB. Max. memory is 16.1GB. [2021-12-21 13:15:13,124 INFO L158 Benchmark]: Boogie Procedure Inliner took 62.26ms. Allocated memory is still 107.0MB. Free memory was 76.3MB in the beginning and 73.8MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:13,124 INFO L158 Benchmark]: Boogie Preprocessor took 41.96ms. Allocated memory is still 107.0MB. Free memory was 73.8MB in the beginning and 72.1MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:13,124 INFO L158 Benchmark]: RCFGBuilder took 446.93ms. Allocated memory is still 107.0MB. Free memory was 72.1MB in the beginning and 82.8MB in the end (delta: -10.8MB). Peak memory consumption was 21.5MB. Max. memory is 16.1GB. [2021-12-21 13:15:13,124 INFO L158 Benchmark]: TraceAbstraction took 8368.05ms. Allocated memory was 107.0MB in the beginning and 188.7MB in the end (delta: 81.8MB). Free memory was 82.4MB in the beginning and 162.0MB in the end (delta: -79.6MB). Peak memory consumption was 114.7MB. Max. memory is 16.1GB. [2021-12-21 13:15:13,124 INFO L158 Benchmark]: Witness Printer took 56.55ms. Allocated memory is still 188.7MB. Free memory was 162.0MB in the beginning and 154.6MB in the end (delta: 7.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-21 13:15:13,125 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 83.9MB. Free memory was 56.5MB in the beginning and 56.4MB in the end (delta: 27.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 393.76ms. Allocated memory was 83.9MB in the beginning and 107.0MB in the end (delta: 23.1MB). Free memory was 50.6MB in the beginning and 76.3MB in the end (delta: -25.6MB). Peak memory consumption was 8.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 62.26ms. Allocated memory is still 107.0MB. Free memory was 76.3MB in the beginning and 73.8MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 41.96ms. Allocated memory is still 107.0MB. Free memory was 73.8MB in the beginning and 72.1MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 446.93ms. Allocated memory is still 107.0MB. Free memory was 72.1MB in the beginning and 82.8MB in the end (delta: -10.8MB). Peak memory consumption was 21.5MB. Max. memory is 16.1GB. * TraceAbstraction took 8368.05ms. Allocated memory was 107.0MB in the beginning and 188.7MB in the end (delta: 81.8MB). Free memory was 82.4MB in the beginning and 162.0MB in the end (delta: -79.6MB). Peak memory consumption was 114.7MB. Max. memory is 16.1GB. * Witness Printer took 56.55ms. Allocated memory is still 188.7MB. Free memory was 162.0MB in the beginning and 154.6MB in the end (delta: 7.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 160]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 114 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.3s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1578 SdHoareTripleChecker+Valid, 1.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1538 mSDsluCounter, 5481 SdHoareTripleChecker+Invalid, 1.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3991 mSDsCounter, 502 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1869 IncrementalHoareTripleChecker+Invalid, 2371 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 502 mSolverCounterUnsat, 1490 mSDtfsCounter, 1869 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 471 GetRequests, 364 SyntacticMatches, 2 SemanticMatches, 105 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 352 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1478occurred in iteration=8, InterpolantAutomatonStates: 83, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 165 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 52 LocationsWithAnnotation, 3057 PreInvPairs, 3616 NumberOfFragments, 1646 HoareAnnotationTreeSize, 3057 FomulaSimplifications, 298 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 52 FomulaSimplificationsInter, 23765 FormulaSimplificationTreeSizeReductionInter, 3.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 863 NumberOfCodeBlocks, 863 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 851 ConstructedInterpolants, 0 QuantifiedInterpolants, 1403 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1082 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 12 InterpolantComputations, 10 PerfectInterpolantSequences, 194/212 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 471]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) && ((pumpRunning == 0 || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 604]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || 0 == systemActive) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 213]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) - InvariantResult [Line: 650]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 156]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || 0 == systemActive) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 504]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical == tmp)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 664]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((pumpRunning == 0 && \result == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) || ((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: ((((!(1 <= methaneLevelCritical) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && tmp == 0))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) || ((pumpRunning == 0 && !(0 == systemActive)) && tmp == 0)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && tmp == 0)) || 0 == systemActive) - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2021-12-21 13:15:13,158 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE