./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4d13ffd2557e7d7902d8a5eac414f9fb7393252d85c14855e86000741be6847f --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:15:41,601 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:15:41,603 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:15:41,667 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:15:41,667 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:15:41,670 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:15:41,671 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:15:41,674 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:15:41,677 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:15:41,681 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:15:41,681 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:15:41,683 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:15:41,683 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:15:41,685 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:15:41,686 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:15:41,688 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:15:41,689 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:15:41,689 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:15:41,691 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:15:41,695 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:15:41,696 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:15:41,697 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:15:41,699 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:15:41,700 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:15:41,705 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:15:41,706 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:15:41,706 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:15:41,708 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:15:41,708 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:15:41,709 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:15:41,710 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:15:41,710 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:15:41,712 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:15:41,713 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:15:41,714 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:15:41,714 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:15:41,714 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:15:41,715 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:15:41,715 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:15:41,715 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:15:41,716 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:15:41,717 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:15:41,743 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:15:41,744 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:15:41,744 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:15:41,744 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:15:41,745 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:15:41,746 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:15:41,746 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:15:41,746 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:15:41,746 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:15:41,747 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:15:41,747 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:15:41,747 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:15:41,748 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:15:41,748 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:15:41,748 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:15:41,748 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:15:41,748 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:15:41,748 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:15:41,748 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:15:41,749 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:15:41,749 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:15:41,749 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:15:41,749 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:15:41,749 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:15:41,749 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:15:41,750 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:15:41,750 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:15:41,750 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:15:41,750 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:15:41,750 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:15:41,750 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:15:41,750 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:15:41,751 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:15:41,751 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:15:41,751 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4d13ffd2557e7d7902d8a5eac414f9fb7393252d85c14855e86000741be6847f [2021-12-21 13:15:41,981 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:15:41,998 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:15:42,000 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:15:42,001 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:15:42,002 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:15:42,002 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c [2021-12-21 13:15:42,057 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9f75e3c48/f36ab68811ed41fe896b654326ac9a8b/FLAG04757c02b [2021-12-21 13:15:42,378 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:15:42,378 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c [2021-12-21 13:15:42,386 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9f75e3c48/f36ab68811ed41fe896b654326ac9a8b/FLAG04757c02b [2021-12-21 13:15:42,783 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9f75e3c48/f36ab68811ed41fe896b654326ac9a8b [2021-12-21 13:15:42,784 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:15:42,785 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:15:42,787 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:15:42,787 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:15:42,790 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:15:42,790 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:15:42" (1/1) ... [2021-12-21 13:15:42,791 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@a39bdf9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:42, skipping insertion in model container [2021-12-21 13:15:42,792 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:15:42" (1/1) ... [2021-12-21 13:15:42,796 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:15:42,828 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:15:42,957 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c[1605,1618] [2021-12-21 13:15:43,110 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:15:43,118 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:15:43,130 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c[1605,1618] [2021-12-21 13:15:43,174 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:15:43,187 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:15:43,187 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:43 WrapperNode [2021-12-21 13:15:43,188 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:15:43,188 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:15:43,189 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:15:43,189 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:15:43,194 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:43" (1/1) ... [2021-12-21 13:15:43,214 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:43" (1/1) ... [2021-12-21 13:15:43,254 INFO L137 Inliner]: procedures = 58, calls = 162, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 283 [2021-12-21 13:15:43,255 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:15:43,256 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:15:43,256 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:15:43,256 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:15:43,264 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:43" (1/1) ... [2021-12-21 13:15:43,264 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:43" (1/1) ... [2021-12-21 13:15:43,276 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:43" (1/1) ... [2021-12-21 13:15:43,277 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:43" (1/1) ... [2021-12-21 13:15:43,284 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:43" (1/1) ... [2021-12-21 13:15:43,294 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:43" (1/1) ... [2021-12-21 13:15:43,295 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:43" (1/1) ... [2021-12-21 13:15:43,297 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:15:43,297 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:15:43,297 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:15:43,297 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:15:43,299 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:43" (1/1) ... [2021-12-21 13:15:43,305 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:15:43,314 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:43,329 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:15:43,343 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:15:43,372 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:15:43,373 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:15:43,373 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:15:43,373 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:15:43,373 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:15:43,373 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:15:43,373 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:15:43,374 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-21 13:15:43,374 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-21 13:15:43,374 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:15:43,374 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:15:43,374 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:15:43,374 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:15:43,374 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:15:43,374 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:15:43,375 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-21 13:15:43,375 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-21 13:15:43,375 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-21 13:15:43,375 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-21 13:15:43,375 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:15:43,375 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:15:43,375 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:15:43,375 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:15:43,376 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:15:43,449 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:15:43,450 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:15:43,711 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:15:43,718 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:15:43,718 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:15:43,720 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:15:43 BoogieIcfgContainer [2021-12-21 13:15:43,720 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:15:43,722 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:15:43,722 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:15:43,725 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:15:43,726 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:15:42" (1/3) ... [2021-12-21 13:15:43,726 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4751bdd1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:15:43, skipping insertion in model container [2021-12-21 13:15:43,727 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:15:43" (2/3) ... [2021-12-21 13:15:43,727 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4751bdd1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:15:43, skipping insertion in model container [2021-12-21 13:15:43,727 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:15:43" (3/3) ... [2021-12-21 13:15:43,728 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product62.cil.c [2021-12-21 13:15:43,734 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:15:43,734 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:15:43,769 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:15:43,776 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:15:43,777 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:15:43,795 INFO L276 IsEmpty]: Start isEmpty. Operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-21 13:15:43,800 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-21 13:15:43,800 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:43,800 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:43,801 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:43,804 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:43,804 INFO L85 PathProgramCache]: Analyzing trace with hash 1444919738, now seen corresponding path program 1 times [2021-12-21 13:15:43,810 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:43,810 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2118439274] [2021-12-21 13:15:43,811 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:43,811 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:43,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:43,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:15:43,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:43,971 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:43,971 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:43,972 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2118439274] [2021-12-21 13:15:43,972 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2118439274] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:43,973 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:43,973 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:15:43,974 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [374363502] [2021-12-21 13:15:43,974 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:43,977 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:15:43,978 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:43,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:15:44,000 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:15:44,002 INFO L87 Difference]: Start difference. First operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:44,045 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:44,046 INFO L93 Difference]: Finished difference Result 214 states and 289 transitions. [2021-12-21 13:15:44,047 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:15:44,048 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-21 13:15:44,048 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:44,057 INFO L225 Difference]: With dead ends: 214 [2021-12-21 13:15:44,058 INFO L226 Difference]: Without dead ends: 102 [2021-12-21 13:15:44,062 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:15:44,065 INFO L933 BasicCegarLoop]: 141 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:44,066 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:44,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2021-12-21 13:15:44,104 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 102. [2021-12-21 13:15:44,106 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 83 states have internal predecessors, (97), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-12-21 13:15:44,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 132 transitions. [2021-12-21 13:15:44,113 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 132 transitions. Word has length 25 [2021-12-21 13:15:44,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:44,114 INFO L470 AbstractCegarLoop]: Abstraction has 102 states and 132 transitions. [2021-12-21 13:15:44,114 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:44,115 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 132 transitions. [2021-12-21 13:15:44,120 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-21 13:15:44,121 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:44,121 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:44,122 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:15:44,122 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:44,125 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:44,125 INFO L85 PathProgramCache]: Analyzing trace with hash 1097025375, now seen corresponding path program 1 times [2021-12-21 13:15:44,125 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:44,125 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1266491001] [2021-12-21 13:15:44,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:44,126 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:44,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-21 13:15:44,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,217 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:44,217 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:44,218 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1266491001] [2021-12-21 13:15:44,218 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1266491001] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:44,219 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:44,219 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:15:44,219 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [274902608] [2021-12-21 13:15:44,219 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:44,220 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:15:44,221 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:44,222 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:15:44,224 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:15:44,224 INFO L87 Difference]: Start difference. First operand 102 states and 132 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:44,248 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:44,248 INFO L93 Difference]: Finished difference Result 169 states and 219 transitions. [2021-12-21 13:15:44,249 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:15:44,249 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-21 13:15:44,249 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:44,250 INFO L225 Difference]: With dead ends: 169 [2021-12-21 13:15:44,250 INFO L226 Difference]: Without dead ends: 93 [2021-12-21 13:15:44,251 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:15:44,252 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 13 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:44,252 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 221 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:44,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2021-12-21 13:15:44,258 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2021-12-21 13:15:44,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 77 states have internal predecessors, (90), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-21 13:15:44,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 120 transitions. [2021-12-21 13:15:44,259 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 120 transitions. Word has length 26 [2021-12-21 13:15:44,259 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:44,260 INFO L470 AbstractCegarLoop]: Abstraction has 93 states and 120 transitions. [2021-12-21 13:15:44,260 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:44,260 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 120 transitions. [2021-12-21 13:15:44,279 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-21 13:15:44,280 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:44,280 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:44,280 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:15:44,280 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:44,281 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:44,282 INFO L85 PathProgramCache]: Analyzing trace with hash 2131311946, now seen corresponding path program 1 times [2021-12-21 13:15:44,282 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:44,282 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [884585022] [2021-12-21 13:15:44,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:44,283 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:44,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:44,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,416 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:44,417 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:44,417 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [884585022] [2021-12-21 13:15:44,417 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [884585022] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:44,417 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:44,417 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:15:44,417 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [7751727] [2021-12-21 13:15:44,417 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:44,418 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:15:44,418 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:44,418 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:15:44,418 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:15:44,419 INFO L87 Difference]: Start difference. First operand 93 states and 120 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:44,457 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:44,457 INFO L93 Difference]: Finished difference Result 179 states and 234 transitions. [2021-12-21 13:15:44,458 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:15:44,458 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-21 13:15:44,458 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:44,459 INFO L225 Difference]: With dead ends: 179 [2021-12-21 13:15:44,459 INFO L226 Difference]: Without dead ends: 93 [2021-12-21 13:15:44,460 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:15:44,460 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 145 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:44,461 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [145 Valid, 307 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:44,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2021-12-21 13:15:44,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2021-12-21 13:15:44,470 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 77 states have internal predecessors, (89), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-21 13:15:44,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 119 transitions. [2021-12-21 13:15:44,472 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 119 transitions. Word has length 31 [2021-12-21 13:15:44,472 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:44,472 INFO L470 AbstractCegarLoop]: Abstraction has 93 states and 119 transitions. [2021-12-21 13:15:44,472 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:15:44,472 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 119 transitions. [2021-12-21 13:15:44,475 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-21 13:15:44,475 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:44,475 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:44,475 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:15:44,476 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:44,476 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:44,476 INFO L85 PathProgramCache]: Analyzing trace with hash 394218810, now seen corresponding path program 1 times [2021-12-21 13:15:44,476 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:44,477 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1204704201] [2021-12-21 13:15:44,477 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:44,477 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:44,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:44,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:44,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:44,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-21 13:15:44,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,555 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:44,555 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:44,555 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1204704201] [2021-12-21 13:15:44,555 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1204704201] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:44,555 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:44,556 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:15:44,556 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1928380821] [2021-12-21 13:15:44,556 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:44,557 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:15:44,557 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:44,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:15:44,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:15:44,558 INFO L87 Difference]: Start difference. First operand 93 states and 119 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:15:44,752 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:44,752 INFO L93 Difference]: Finished difference Result 271 states and 345 transitions. [2021-12-21 13:15:44,753 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:15:44,753 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 46 [2021-12-21 13:15:44,753 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:44,754 INFO L225 Difference]: With dead ends: 271 [2021-12-21 13:15:44,754 INFO L226 Difference]: Without dead ends: 185 [2021-12-21 13:15:44,755 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:15:44,756 INFO L933 BasicCegarLoop]: 155 mSDtfsCounter, 216 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:44,756 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [218 Valid, 349 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:15:44,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2021-12-21 13:15:44,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 179. [2021-12-21 13:15:44,773 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 133 states have (on average 1.2481203007518797) internal successors, (166), 142 states have internal predecessors, (166), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2021-12-21 13:15:44,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 217 transitions. [2021-12-21 13:15:44,774 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 217 transitions. Word has length 46 [2021-12-21 13:15:44,774 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:44,774 INFO L470 AbstractCegarLoop]: Abstraction has 179 states and 217 transitions. [2021-12-21 13:15:44,774 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:15:44,775 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 217 transitions. [2021-12-21 13:15:44,775 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-12-21 13:15:44,775 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:44,775 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:44,775 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:15:44,776 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:44,776 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:44,776 INFO L85 PathProgramCache]: Analyzing trace with hash 1565999890, now seen corresponding path program 1 times [2021-12-21 13:15:44,776 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:44,776 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [502471389] [2021-12-21 13:15:44,786 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:44,786 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:44,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:44,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:44,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:44,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-21 13:15:44,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:44,886 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:44,886 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:44,887 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [502471389] [2021-12-21 13:15:44,887 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [502471389] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:44,887 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:44,887 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:15:44,888 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2010777110] [2021-12-21 13:15:44,888 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:44,888 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:15:44,889 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:44,889 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:15:44,890 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:15:44,890 INFO L87 Difference]: Start difference. First operand 179 states and 217 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:15:45,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:45,095 INFO L93 Difference]: Finished difference Result 458 states and 576 transitions. [2021-12-21 13:15:45,095 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-21 13:15:45,095 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2021-12-21 13:15:45,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:45,097 INFO L225 Difference]: With dead ends: 458 [2021-12-21 13:15:45,097 INFO L226 Difference]: Without dead ends: 286 [2021-12-21 13:15:45,098 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2021-12-21 13:15:45,099 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 158 mSDsluCounter, 334 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 450 SdHoareTripleChecker+Invalid, 232 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:45,099 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [165 Valid, 450 Invalid, 232 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:15:45,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2021-12-21 13:15:45,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 278. [2021-12-21 13:15:45,116 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 207 states have (on average 1.2367149758454106) internal successors, (256), 219 states have internal predecessors, (256), 35 states have call successors, (35), 30 states have call predecessors, (35), 35 states have return successors, (48), 37 states have call predecessors, (48), 35 states have call successors, (48) [2021-12-21 13:15:45,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 339 transitions. [2021-12-21 13:15:45,117 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 339 transitions. Word has length 52 [2021-12-21 13:15:45,117 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:45,117 INFO L470 AbstractCegarLoop]: Abstraction has 278 states and 339 transitions. [2021-12-21 13:15:45,117 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:15:45,118 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 339 transitions. [2021-12-21 13:15:45,118 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-21 13:15:45,118 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:45,118 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:45,119 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:15:45,119 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:45,123 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:45,123 INFO L85 PathProgramCache]: Analyzing trace with hash 862642872, now seen corresponding path program 1 times [2021-12-21 13:15:45,123 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:45,124 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1661187433] [2021-12-21 13:15:45,124 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:45,124 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:45,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:45,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:15:45,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:45,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:15:45,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:45,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:45,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:45,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:45,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:45,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-21 13:15:45,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:45,196 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:45,196 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:45,197 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1661187433] [2021-12-21 13:15:45,197 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1661187433] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:45,197 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:45,197 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:15:45,197 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1896182974] [2021-12-21 13:15:45,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:45,198 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:15:45,198 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:45,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:15:45,198 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:15:45,199 INFO L87 Difference]: Start difference. First operand 278 states and 339 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:15:45,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:45,653 INFO L93 Difference]: Finished difference Result 670 states and 856 transitions. [2021-12-21 13:15:45,653 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-21 13:15:45,653 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2021-12-21 13:15:45,654 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:45,656 INFO L225 Difference]: With dead ends: 670 [2021-12-21 13:15:45,656 INFO L226 Difference]: Without dead ends: 498 [2021-12-21 13:15:45,657 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2021-12-21 13:15:45,657 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 364 mSDsluCounter, 286 mSDsCounter, 0 mSdLazyCounter, 399 mSolverCounterSat, 152 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 368 SdHoareTripleChecker+Valid, 402 SdHoareTripleChecker+Invalid, 551 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 152 IncrementalHoareTripleChecker+Valid, 399 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:45,658 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [368 Valid, 402 Invalid, 551 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [152 Valid, 399 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-21 13:15:45,658 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2021-12-21 13:15:45,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 464. [2021-12-21 13:15:45,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 464 states, 343 states have (on average 1.215743440233236) internal successors, (417), 365 states have internal predecessors, (417), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2021-12-21 13:15:45,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 464 states to 464 states and 572 transitions. [2021-12-21 13:15:45,708 INFO L78 Accepts]: Start accepts. Automaton has 464 states and 572 transitions. Word has length 56 [2021-12-21 13:15:45,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:45,711 INFO L470 AbstractCegarLoop]: Abstraction has 464 states and 572 transitions. [2021-12-21 13:15:45,711 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:15:45,711 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 572 transitions. [2021-12-21 13:15:45,713 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-21 13:15:45,713 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:45,713 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:45,714 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:15:45,714 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:45,714 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:45,714 INFO L85 PathProgramCache]: Analyzing trace with hash 924682486, now seen corresponding path program 1 times [2021-12-21 13:15:45,714 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:45,715 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [17045066] [2021-12-21 13:15:45,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:45,715 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:45,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:45,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:15:45,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:45,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:15:45,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:45,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:45,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:45,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:45,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:45,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-21 13:15:45,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:45,802 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:45,802 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:45,802 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [17045066] [2021-12-21 13:15:45,802 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [17045066] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:45,802 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:45,803 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:15:45,803 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1018883275] [2021-12-21 13:15:45,803 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:45,803 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:15:45,804 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:45,804 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:15:45,804 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:15:45,804 INFO L87 Difference]: Start difference. First operand 464 states and 572 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:15:46,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:46,003 INFO L93 Difference]: Finished difference Result 860 states and 1070 transitions. [2021-12-21 13:15:46,004 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-21 13:15:46,004 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2021-12-21 13:15:46,005 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:46,007 INFO L225 Difference]: With dead ends: 860 [2021-12-21 13:15:46,007 INFO L226 Difference]: Without dead ends: 498 [2021-12-21 13:15:46,008 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:15:46,008 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 184 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 239 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 313 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 239 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:46,008 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [187 Valid, 381 Invalid, 313 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 239 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:46,009 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2021-12-21 13:15:46,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 464. [2021-12-21 13:15:46,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 464 states, 343 states have (on average 1.2128279883381925) internal successors, (416), 365 states have internal predecessors, (416), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2021-12-21 13:15:46,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 464 states to 464 states and 571 transitions. [2021-12-21 13:15:46,041 INFO L78 Accepts]: Start accepts. Automaton has 464 states and 571 transitions. Word has length 56 [2021-12-21 13:15:46,042 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:46,042 INFO L470 AbstractCegarLoop]: Abstraction has 464 states and 571 transitions. [2021-12-21 13:15:46,042 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:15:46,042 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 571 transitions. [2021-12-21 13:15:46,042 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-21 13:15:46,042 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:46,043 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:46,043 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:15:46,043 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:46,043 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:46,043 INFO L85 PathProgramCache]: Analyzing trace with hash 790668980, now seen corresponding path program 1 times [2021-12-21 13:15:46,043 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:46,043 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [517423715] [2021-12-21 13:15:46,044 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:46,044 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:46,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:15:46,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:15:46,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:46,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:46,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-21 13:15:46,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,134 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:46,134 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:46,134 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [517423715] [2021-12-21 13:15:46,134 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [517423715] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:46,134 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:46,135 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-21 13:15:46,135 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1246171058] [2021-12-21 13:15:46,135 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:46,135 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-21 13:15:46,135 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:46,135 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-21 13:15:46,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2021-12-21 13:15:46,136 INFO L87 Difference]: Start difference. First operand 464 states and 571 transitions. Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:15:46,419 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:46,419 INFO L93 Difference]: Finished difference Result 950 states and 1185 transitions. [2021-12-21 13:15:46,420 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-21 13:15:46,420 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2021-12-21 13:15:46,420 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:46,422 INFO L225 Difference]: With dead ends: 950 [2021-12-21 13:15:46,422 INFO L226 Difference]: Without dead ends: 493 [2021-12-21 13:15:46,423 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=156, Unknown=0, NotChecked=0, Total=210 [2021-12-21 13:15:46,424 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 221 mSDsluCounter, 423 mSDsCounter, 0 mSdLazyCounter, 463 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 537 SdHoareTripleChecker+Invalid, 535 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 463 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:46,424 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [224 Valid, 537 Invalid, 535 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 463 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:15:46,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 493 states. [2021-12-21 13:15:46,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 493 to 467. [2021-12-21 13:15:46,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 467 states, 348 states have (on average 1.206896551724138) internal successors, (420), 369 states have internal predecessors, (420), 59 states have call successors, (59), 45 states have call predecessors, (59), 59 states have return successors, (94), 63 states have call predecessors, (94), 59 states have call successors, (94) [2021-12-21 13:15:46,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 467 states to 467 states and 573 transitions. [2021-12-21 13:15:46,441 INFO L78 Accepts]: Start accepts. Automaton has 467 states and 573 transitions. Word has length 56 [2021-12-21 13:15:46,441 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:46,443 INFO L470 AbstractCegarLoop]: Abstraction has 467 states and 573 transitions. [2021-12-21 13:15:46,443 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:15:46,443 INFO L276 IsEmpty]: Start isEmpty. Operand 467 states and 573 transitions. [2021-12-21 13:15:46,444 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-21 13:15:46,444 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:46,444 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:46,444 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:15:46,444 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:46,445 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:46,445 INFO L85 PathProgramCache]: Analyzing trace with hash -1116274415, now seen corresponding path program 1 times [2021-12-21 13:15:46,445 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:46,445 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1292032098] [2021-12-21 13:15:46,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:46,446 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:46,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:15:46,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:15:46,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:46,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:46,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:46,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-12-21 13:15:46,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,625 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-21 13:15:46,625 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:46,625 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1292032098] [2021-12-21 13:15:46,625 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1292032098] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:46,626 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [125594582] [2021-12-21 13:15:46,626 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:46,626 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:46,626 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:46,627 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:46,628 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:15:46,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:46,795 INFO L263 TraceCheckSpWp]: Trace formula consists of 393 conjuncts, 17 conjunts are in the unsatisfiable core [2021-12-21 13:15:46,800 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:47,181 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:47,181 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:15:47,181 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [125594582] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:47,181 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:15:47,182 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2021-12-21 13:15:47,182 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2117886380] [2021-12-21 13:15:47,182 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:47,182 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-21 13:15:47,182 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:47,183 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-21 13:15:47,183 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2021-12-21 13:15:47,183 INFO L87 Difference]: Start difference. First operand 467 states and 573 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-21 13:15:47,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:47,334 INFO L93 Difference]: Finished difference Result 1368 states and 1709 transitions. [2021-12-21 13:15:47,335 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-21 13:15:47,335 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2021-12-21 13:15:47,336 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:47,339 INFO L225 Difference]: With dead ends: 1368 [2021-12-21 13:15:47,339 INFO L226 Difference]: Without dead ends: 908 [2021-12-21 13:15:47,341 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 68 SyntacticMatches, 2 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2021-12-21 13:15:47,344 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 72 mSDsluCounter, 601 mSDsCounter, 0 mSdLazyCounter, 198 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 733 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 198 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:47,344 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 733 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 198 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:47,345 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 908 states. [2021-12-21 13:15:47,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 908 to 906. [2021-12-21 13:15:47,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 673 states have (on average 1.1961367013372957) internal successors, (805), 711 states have internal predecessors, (805), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (189), 123 states have call predecessors, (189), 117 states have call successors, (189) [2021-12-21 13:15:47,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1111 transitions. [2021-12-21 13:15:47,391 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1111 transitions. Word has length 65 [2021-12-21 13:15:47,391 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:47,391 INFO L470 AbstractCegarLoop]: Abstraction has 906 states and 1111 transitions. [2021-12-21 13:15:47,391 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-21 13:15:47,391 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1111 transitions. [2021-12-21 13:15:47,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-12-21 13:15:47,392 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:47,392 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:47,415 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:47,612 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:47,613 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:47,613 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:47,613 INFO L85 PathProgramCache]: Analyzing trace with hash -930662327, now seen corresponding path program 1 times [2021-12-21 13:15:47,613 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:47,613 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1427228537] [2021-12-21 13:15:47,614 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:47,614 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:47,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:47,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:15:47,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:47,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:15:47,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:47,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:47,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:47,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:47,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:47,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:47,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:47,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-21 13:15:47,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:47,727 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:15:47,727 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:47,727 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1427228537] [2021-12-21 13:15:47,727 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1427228537] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:47,727 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:47,728 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-21 13:15:47,728 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1843000284] [2021-12-21 13:15:47,728 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:47,733 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-21 13:15:47,734 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:47,734 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-21 13:15:47,734 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:15:47,734 INFO L87 Difference]: Start difference. First operand 906 states and 1111 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-21 13:15:48,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:48,119 INFO L93 Difference]: Finished difference Result 1828 states and 2237 transitions. [2021-12-21 13:15:48,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-21 13:15:48,120 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2021-12-21 13:15:48,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:48,123 INFO L225 Difference]: With dead ends: 1828 [2021-12-21 13:15:48,123 INFO L226 Difference]: Without dead ends: 929 [2021-12-21 13:15:48,125 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=330, Unknown=0, NotChecked=0, Total=420 [2021-12-21 13:15:48,126 INFO L933 BasicCegarLoop]: 176 mSDtfsCounter, 349 mSDsluCounter, 551 mSDsCounter, 0 mSdLazyCounter, 601 mSolverCounterSat, 138 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 727 SdHoareTripleChecker+Invalid, 739 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 138 IncrementalHoareTripleChecker+Valid, 601 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:48,126 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [350 Valid, 727 Invalid, 739 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [138 Valid, 601 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-21 13:15:48,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 929 states. [2021-12-21 13:15:48,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 929 to 906. [2021-12-21 13:15:48,161 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 673 states have (on average 1.1812778603268945) internal successors, (795), 711 states have internal predecessors, (795), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (174), 123 states have call predecessors, (174), 117 states have call successors, (174) [2021-12-21 13:15:48,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1086 transitions. [2021-12-21 13:15:48,165 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1086 transitions. Word has length 66 [2021-12-21 13:15:48,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:48,166 INFO L470 AbstractCegarLoop]: Abstraction has 906 states and 1086 transitions. [2021-12-21 13:15:48,166 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-21 13:15:48,166 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1086 transitions. [2021-12-21 13:15:48,167 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-21 13:15:48,167 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:48,167 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:48,167 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-21 13:15:48,168 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:48,168 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:48,168 INFO L85 PathProgramCache]: Analyzing trace with hash 1947456301, now seen corresponding path program 1 times [2021-12-21 13:15:48,168 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:48,168 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1430255557] [2021-12-21 13:15:48,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:48,168 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:48,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:48,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:15:48,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:48,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-21 13:15:48,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:48,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-21 13:15:48,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:48,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:48,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:48,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:48,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:48,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:48,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:48,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-21 13:15:48,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:48,256 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-21 13:15:48,256 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:48,256 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1430255557] [2021-12-21 13:15:48,256 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1430255557] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:48,256 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:48,256 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-12-21 13:15:48,257 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [49382982] [2021-12-21 13:15:48,257 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:48,257 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-21 13:15:48,257 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:48,257 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-21 13:15:48,257 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=110, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:15:48,257 INFO L87 Difference]: Start difference. First operand 906 states and 1086 transitions. Second operand has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-21 13:15:49,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:49,136 INFO L93 Difference]: Finished difference Result 1806 states and 2184 transitions. [2021-12-21 13:15:49,136 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-21 13:15:49,136 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 69 [2021-12-21 13:15:49,136 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:49,140 INFO L225 Difference]: With dead ends: 1806 [2021-12-21 13:15:49,140 INFO L226 Difference]: Without dead ends: 907 [2021-12-21 13:15:49,142 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 287 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=262, Invalid=1070, Unknown=0, NotChecked=0, Total=1332 [2021-12-21 13:15:49,143 INFO L933 BasicCegarLoop]: 184 mSDtfsCounter, 409 mSDsluCounter, 385 mSDsCounter, 0 mSdLazyCounter, 1345 mSolverCounterSat, 265 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 410 SdHoareTripleChecker+Valid, 569 SdHoareTripleChecker+Invalid, 1610 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 265 IncrementalHoareTripleChecker+Valid, 1345 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:49,143 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [410 Valid, 569 Invalid, 1610 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [265 Valid, 1345 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-21 13:15:49,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 907 states. [2021-12-21 13:15:49,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 907 to 874. [2021-12-21 13:15:49,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 874 states, 641 states have (on average 1.1528861154446177) internal successors, (739), 679 states have internal predecessors, (739), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (168), 123 states have call predecessors, (168), 117 states have call successors, (168) [2021-12-21 13:15:49,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 874 states to 874 states and 1024 transitions. [2021-12-21 13:15:49,179 INFO L78 Accepts]: Start accepts. Automaton has 874 states and 1024 transitions. Word has length 69 [2021-12-21 13:15:49,179 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:49,179 INFO L470 AbstractCegarLoop]: Abstraction has 874 states and 1024 transitions. [2021-12-21 13:15:49,179 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-21 13:15:49,180 INFO L276 IsEmpty]: Start isEmpty. Operand 874 states and 1024 transitions. [2021-12-21 13:15:49,185 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2021-12-21 13:15:49,186 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:49,186 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:49,186 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-21 13:15:49,186 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:49,187 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:49,187 INFO L85 PathProgramCache]: Analyzing trace with hash 20560600, now seen corresponding path program 1 times [2021-12-21 13:15:49,187 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:49,187 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1564073189] [2021-12-21 13:15:49,187 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:49,187 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:49,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-21 13:15:49,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:49,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:15:49,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:49,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:49,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:49,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-21 13:15:49,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-21 13:15:49,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:15:49,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-21 13:15:49,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 96 [2021-12-21 13:15:49,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,410 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 2 proven. 21 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2021-12-21 13:15:49,410 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:49,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1564073189] [2021-12-21 13:15:49,410 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1564073189] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:49,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2010967249] [2021-12-21 13:15:49,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:49,411 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:49,411 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:49,412 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:49,413 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 13:15:49,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:49,491 INFO L263 TraceCheckSpWp]: Trace formula consists of 492 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-21 13:15:49,498 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:49,687 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-21 13:15:49,687 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:15:50,010 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2021-12-21 13:15:50,010 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2010967249] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:15:50,011 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:15:50,011 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 8, 9] total 23 [2021-12-21 13:15:50,011 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1406355961] [2021-12-21 13:15:50,011 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:15:50,011 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2021-12-21 13:15:50,012 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:50,012 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2021-12-21 13:15:50,012 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=431, Unknown=0, NotChecked=0, Total=506 [2021-12-21 13:15:50,012 INFO L87 Difference]: Start difference. First operand 874 states and 1024 transitions. Second operand has 23 states, 23 states have (on average 5.3478260869565215) internal successors, (123), 16 states have internal predecessors, (123), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2021-12-21 13:15:51,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:51,979 INFO L93 Difference]: Finished difference Result 1808 states and 2190 transitions. [2021-12-21 13:15:51,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 74 states. [2021-12-21 13:15:51,979 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 5.3478260869565215) internal successors, (123), 16 states have internal predecessors, (123), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) Word has length 107 [2021-12-21 13:15:51,979 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:51,980 INFO L225 Difference]: With dead ends: 1808 [2021-12-21 13:15:51,980 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:15:51,987 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 336 GetRequests, 242 SyntacticMatches, 4 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2526 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=1811, Invalid=6561, Unknown=0, NotChecked=0, Total=8372 [2021-12-21 13:15:51,988 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 1214 mSDsluCounter, 701 mSDsCounter, 0 mSdLazyCounter, 1936 mSolverCounterSat, 701 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1217 SdHoareTripleChecker+Valid, 796 SdHoareTripleChecker+Invalid, 2637 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 701 IncrementalHoareTripleChecker+Valid, 1936 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:51,989 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1217 Valid, 796 Invalid, 2637 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [701 Valid, 1936 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-12-21 13:15:51,989 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:15:51,989 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:15:51,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:15:51,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:15:51,989 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 107 [2021-12-21 13:15:51,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:51,990 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:15:51,990 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 5.3478260869565215) internal successors, (123), 16 states have internal predecessors, (123), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2021-12-21 13:15:51,990 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:15:51,990 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:15:51,992 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:15:52,009 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:52,203 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-21 13:15:52,205 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:15:57,062 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 751 758) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= 0 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 1)) (= 0 ~systemActive~0)) [2021-12-21 13:15:57,062 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 751 758) no Hoare annotation was computed. [2021-12-21 13:15:57,063 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 751 758) no Hoare annotation was computed. [2021-12-21 13:15:57,063 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 641 647) no Hoare annotation was computed. [2021-12-21 13:15:57,063 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 641 647) the Hoare annotation is: true [2021-12-21 13:15:57,063 INFO L854 garLoopResultBuilder]: At program point L566(lines 561 569) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-21 13:15:57,063 INFO L854 garLoopResultBuilder]: At program point L694(line 694) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-21 13:15:57,063 INFO L858 garLoopResultBuilder]: For program point L694-1(lines 675 699) no Hoare annotation was computed. [2021-12-21 13:15:57,063 INFO L854 garLoopResultBuilder]: At program point L849(lines 834 852) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-21 13:15:57,063 INFO L858 garLoopResultBuilder]: For program point L843(lines 843 847) no Hoare annotation was computed. [2021-12-21 13:15:57,063 INFO L858 garLoopResultBuilder]: For program point L843-2(lines 843 847) no Hoare annotation was computed. [2021-12-21 13:15:57,063 INFO L854 garLoopResultBuilder]: At program point L689(line 689) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-21 13:15:57,064 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 675 699) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-21 13:15:57,064 INFO L854 garLoopResultBuilder]: At program point L685(line 685) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-21 13:15:57,064 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 675 699) no Hoare annotation was computed. [2021-12-21 13:15:57,064 INFO L858 garLoopResultBuilder]: For program point L683(lines 683 691) no Hoare annotation was computed. [2021-12-21 13:15:57,064 INFO L858 garLoopResultBuilder]: For program point L679(lines 679 696) no Hoare annotation was computed. [2021-12-21 13:15:57,064 INFO L858 garLoopResultBuilder]: For program point L498-1(lines 494 505) no Hoare annotation was computed. [2021-12-21 13:15:57,064 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 494 505) the Hoare annotation is: (let ((.cse0 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (<= 0 |old(~methaneLevelCritical~0)|))) (.cse3 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 .cse2 .cse3))) [2021-12-21 13:15:57,064 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 494 505) no Hoare annotation was computed. [2021-12-21 13:15:57,064 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 931 960) no Hoare annotation was computed. [2021-12-21 13:15:57,064 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 931 960) the Hoare annotation is: true [2021-12-21 13:15:57,064 INFO L861 garLoopResultBuilder]: At program point L956(lines 931 960) the Hoare annotation is: true [2021-12-21 13:15:57,064 INFO L858 garLoopResultBuilder]: For program point L952(line 952) no Hoare annotation was computed. [2021-12-21 13:15:57,064 INFO L858 garLoopResultBuilder]: For program point L945(lines 945 949) no Hoare annotation was computed. [2021-12-21 13:15:57,064 INFO L861 garLoopResultBuilder]: At program point L945-1(lines 945 949) the Hoare annotation is: true [2021-12-21 13:15:57,064 INFO L858 garLoopResultBuilder]: For program point L942(line 942) no Hoare annotation was computed. [2021-12-21 13:15:57,065 INFO L861 garLoopResultBuilder]: At program point L941-2(lines 941 955) the Hoare annotation is: true [2021-12-21 13:15:57,065 INFO L861 garLoopResultBuilder]: At program point L937(line 937) the Hoare annotation is: true [2021-12-21 13:15:57,065 INFO L858 garLoopResultBuilder]: For program point L937-1(line 937) no Hoare annotation was computed. [2021-12-21 13:15:57,065 INFO L854 garLoopResultBuilder]: At program point L543(lines 538 546) the Hoare annotation is: (let ((.cse8 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse0 .cse3 .cse2 .cse4) (let ((.cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6 .cse7 .cse8) .cse9 .cse1 .cse2 .cse4 (and .cse10 .cse5 .cse6 .cse7 .cse8))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse8) (let ((.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and (<= 1 ~pumpRunning~0) .cse6 .cse11) (and .cse10 .cse5 .cse6 .cse11) .cse1 .cse2 .cse4)) (or .cse9 .cse3 .cse2 .cse4))) [2021-12-21 13:15:57,065 INFO L858 garLoopResultBuilder]: For program point L81(lines 81 87) no Hoare annotation was computed. [2021-12-21 13:15:57,065 INFO L858 garLoopResultBuilder]: For program point L77(lines 77 90) no Hoare annotation was computed. [2021-12-21 13:15:57,065 INFO L854 garLoopResultBuilder]: At program point L77-1(lines 62 94) the Hoare annotation is: (let ((.cse1 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0))) (let ((.cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse11 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse3 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0))) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse16 (not .cse1)) (.cse7 (= 0 ~systemActive~0)) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (<= 1 ~pumpRunning~0) .cse1 .cse2) .cse3 (and .cse4 .cse5 .cse1 .cse2) .cse6 .cse7 .cse8) (or (and .cse4 .cse5 .cse9 .cse1 .cse10 .cse11) (and .cse12 .cse5 .cse9 .cse1 .cse10 .cse11) .cse13 .cse3 .cse6 .cse7 .cse8) (or .cse14 .cse13 .cse15 .cse10 .cse7) (or .cse0 .cse15 (and .cse4 .cse2 .cse16) .cse7 .cse8) (or .cse14 .cse0 (and .cse9 .cse11) .cse3 .cse6 .cse7) (or (and .cse12 .cse5 .cse16) .cse13 .cse15 (and .cse4 .cse5 .cse16) .cse7 .cse8)))) [2021-12-21 13:15:57,065 INFO L854 garLoopResultBuilder]: At program point L775(lines 770 778) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2) (or .cse0 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse3 .cse1 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse3 .cse1))) [2021-12-21 13:15:57,065 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 617 640) no Hoare annotation was computed. [2021-12-21 13:15:57,065 INFO L858 garLoopResultBuilder]: For program point L709(lines 709 717) no Hoare annotation was computed. [2021-12-21 13:15:57,065 INFO L854 garLoopResultBuilder]: At program point L69(line 69) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse1 .cse5 .cse6) .cse7 .cse3 .cse4)) (or (and .cse1 .cse5 .cse2) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse7 (and (<= 1 ~pumpRunning~0) .cse2) .cse3 .cse4))) [2021-12-21 13:15:57,066 INFO L858 garLoopResultBuilder]: For program point L69-1(line 69) no Hoare annotation was computed. [2021-12-21 13:15:57,066 INFO L858 garLoopResultBuilder]: For program point L705(lines 705 722) no Hoare annotation was computed. [2021-12-21 13:15:57,066 INFO L858 garLoopResultBuilder]: For program point L474(lines 474 478) no Hoare annotation was computed. [2021-12-21 13:15:57,066 INFO L854 garLoopResultBuilder]: At program point L474-2(lines 470 481) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2021-12-21 13:15:57,066 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2021-12-21 13:15:57,066 INFO L858 garLoopResultBuilder]: For program point L628-1(lines 628 634) no Hoare annotation was computed. [2021-12-21 13:15:57,066 INFO L854 garLoopResultBuilder]: At program point L715(line 715) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2021-12-21 13:15:57,066 INFO L854 garLoopResultBuilder]: At program point L711(line 711) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2021-12-21 13:15:57,066 INFO L858 garLoopResultBuilder]: For program point L71(lines 71 91) no Hoare annotation was computed. [2021-12-21 13:15:57,066 INFO L854 garLoopResultBuilder]: At program point L707(line 707) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2021-12-21 13:15:57,066 INFO L858 garLoopResultBuilder]: For program point L707-1(line 707) no Hoare annotation was computed. [2021-12-21 13:15:57,066 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2))) [2021-12-21 13:15:57,067 INFO L854 garLoopResultBuilder]: At program point L720(line 720) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2021-12-21 13:15:57,067 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 617 640) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2 .cse3) (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1 .cse2 .cse3))) [2021-12-21 13:15:57,067 INFO L854 garLoopResultBuilder]: At program point L720-1(lines 701 725) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse1 .cse5 .cse6) .cse7 .cse3 .cse4)) (or (and .cse1 .cse5 .cse2) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse7 (and (<= 1 ~pumpRunning~0) .cse2) .cse3 .cse4))) [2021-12-21 13:15:57,067 INFO L858 garLoopResultBuilder]: For program point L621-1(lines 620 639) no Hoare annotation was computed. [2021-12-21 13:15:57,067 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 617 640) no Hoare annotation was computed. [2021-12-21 13:15:57,067 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2021-12-21 13:15:57,067 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 506 514) the Hoare annotation is: true [2021-12-21 13:15:57,067 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 506 514) no Hoare annotation was computed. [2021-12-21 13:15:57,067 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 506 514) no Hoare annotation was computed. [2021-12-21 13:15:57,067 INFO L854 garLoopResultBuilder]: At program point L989(lines 985 991) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~11#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:57,067 INFO L858 garLoopResultBuilder]: For program point L911(lines 911 915) no Hoare annotation was computed. [2021-12-21 13:15:57,067 INFO L854 garLoopResultBuilder]: At program point L589(lines 585 591) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:57,068 INFO L854 garLoopResultBuilder]: At program point L911-2(lines 903 916) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2021-12-21 13:15:57,068 INFO L858 garLoopResultBuilder]: For program point L874(lines 873 920) no Hoare annotation was computed. [2021-12-21 13:15:57,068 INFO L858 garLoopResultBuilder]: For program point L903(lines 903 916) no Hoare annotation was computed. [2021-12-21 13:15:57,068 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:15:57,068 INFO L854 garLoopResultBuilder]: At program point L895(line 895) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2021-12-21 13:15:57,068 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:15:57,068 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:15:57,068 INFO L861 garLoopResultBuilder]: At program point L924(lines 863 928) the Hoare annotation is: true [2021-12-21 13:15:57,068 INFO L854 garLoopResultBuilder]: At program point L858(lines 853 860) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2021-12-21 13:15:57,068 INFO L858 garLoopResultBuilder]: For program point L883(lines 883 889) no Hoare annotation was computed. [2021-12-21 13:15:57,069 INFO L858 garLoopResultBuilder]: For program point L883-1(lines 883 889) no Hoare annotation was computed. [2021-12-21 13:15:57,069 INFO L858 garLoopResultBuilder]: For program point L875(lines 875 879) no Hoare annotation was computed. [2021-12-21 13:15:57,069 INFO L861 garLoopResultBuilder]: At program point L999(lines 992 1001) the Hoare annotation is: true [2021-12-21 13:15:57,069 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:15:57,069 INFO L854 garLoopResultBuilder]: At program point L921(lines 872 922) the Hoare annotation is: false [2021-12-21 13:15:57,069 INFO L858 garLoopResultBuilder]: For program point L1012(lines 1012 1019) no Hoare annotation was computed. [2021-12-21 13:15:57,069 INFO L858 garLoopResultBuilder]: For program point L1012-2(lines 1012 1019) no Hoare annotation was computed. [2021-12-21 13:15:57,069 INFO L858 garLoopResultBuilder]: For program point L893(lines 893 899) no Hoare annotation was computed. [2021-12-21 13:15:57,069 INFO L861 garLoopResultBuilder]: At program point L1021(lines 1002 1024) the Hoare annotation is: true [2021-12-21 13:15:57,069 INFO L854 garLoopResultBuilder]: At program point L604(lines 599 607) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:57,069 INFO L858 garLoopResultBuilder]: For program point L893-1(lines 893 899) no Hoare annotation was computed. [2021-12-21 13:15:57,070 INFO L854 garLoopResultBuilder]: At program point L918(lines 873 920) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse9 .cse2 .cse3 .cse5 .cse8 .cse6))) [2021-12-21 13:15:57,070 INFO L854 garLoopResultBuilder]: At program point L885(line 885) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse9 .cse2 .cse3 .cse5 .cse8 .cse6))) [2021-12-21 13:15:57,070 INFO L854 garLoopResultBuilder]: At program point L596(lines 592 598) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:57,070 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 649 673) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-21 13:15:57,070 INFO L854 garLoopResultBuilder]: At program point L830(lines 815 833) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0))) (or (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse2 (and .cse3 .cse1))))) [2021-12-21 13:15:57,070 INFO L854 garLoopResultBuilder]: At program point L731(lines 726 733) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0 1)) (.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|))) (or (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) .cse4 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse5 (and .cse3 .cse1 .cse4) .cse6 .cse0 .cse2)) (or .cse5 (not (<= 1 ~methaneLevelCritical~0)) .cse6 .cse2))) [2021-12-21 13:15:57,070 INFO L858 garLoopResultBuilder]: For program point L824(lines 824 828) no Hoare annotation was computed. [2021-12-21 13:15:57,071 INFO L854 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse2 (and (= ~pumpRunning~0 0) .cse1)))) [2021-12-21 13:15:57,071 INFO L858 garLoopResultBuilder]: For program point L824-2(lines 824 828) no Hoare annotation was computed. [2021-12-21 13:15:57,071 INFO L858 garLoopResultBuilder]: For program point L657(lines 657 665) no Hoare annotation was computed. [2021-12-21 13:15:57,074 INFO L858 garLoopResultBuilder]: For program point L653(lines 653 670) no Hoare annotation was computed. [2021-12-21 13:15:57,074 INFO L854 garLoopResultBuilder]: At program point L556(lines 547 560) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse2 (and .cse3 .cse1))))) [2021-12-21 13:15:57,074 INFO L854 garLoopResultBuilder]: At program point L668(line 668) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2021-12-21 13:15:57,074 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 649 673) no Hoare annotation was computed. [2021-12-21 13:15:57,074 INFO L858 garLoopResultBuilder]: For program point L668-1(lines 649 673) no Hoare annotation was computed. [2021-12-21 13:15:57,074 INFO L858 garLoopResultBuilder]: For program point L551(lines 551 557) no Hoare annotation was computed. [2021-12-21 13:15:57,074 INFO L858 garLoopResultBuilder]: For program point L741(lines 741 747) no Hoare annotation was computed. [2021-12-21 13:15:57,074 INFO L854 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse2 (and .cse3 .cse1))))) [2021-12-21 13:15:57,075 INFO L854 garLoopResultBuilder]: At program point L741-2(lines 734 750) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (<= ~waterLevel~0 1)) (.cse12 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0)) (.cse6 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse7 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)) (.cse8 (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|)) (.cse9 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse11 (<= ~methaneLevelCritical~0 0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|))) (or (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) .cse10 (and .cse3 .cse1 .cse5) (not .cse11) .cse12 .cse0 .cse2)) (let ((.cse13 (= ~pumpRunning~0 0)) (.cse14 (or (not (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|)) (and (< 0 (+ ~methaneLevelCritical~0 1)) .cse11)))) (or .cse10 (and .cse13 .cse1 .cse14) (not (<= 1 ~methaneLevelCritical~0)) .cse12 .cse2 (and .cse13 .cse4 .cse6 .cse7 .cse14 .cse8 .cse9))))) [2021-12-21 13:15:57,075 INFO L858 garLoopResultBuilder]: For program point L739-1(line 739) no Hoare annotation was computed. [2021-12-21 13:15:57,075 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 482 493) no Hoare annotation was computed. [2021-12-21 13:15:57,075 INFO L858 garLoopResultBuilder]: For program point L486-1(lines 482 493) no Hoare annotation was computed. [2021-12-21 13:15:57,075 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 482 493) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse3 .cse4 .cse6) (or .cse0 .cse5 .cse7 .cse3 .cse4) (or .cse2 (not (<= ~methaneLevelCritical~0 0)) .cse7 .cse3 .cse4 .cse6))) [2021-12-21 13:15:57,075 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 759 769) the Hoare annotation is: true [2021-12-21 13:15:57,075 INFO L861 garLoopResultBuilder]: At program point L764(line 764) the Hoare annotation is: true [2021-12-21 13:15:57,075 INFO L858 garLoopResultBuilder]: For program point L764-1(line 764) no Hoare annotation was computed. [2021-12-21 13:15:57,076 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 759 769) no Hoare annotation was computed. [2021-12-21 13:15:57,076 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 759 769) no Hoare annotation was computed. [2021-12-21 13:15:57,078 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:57,079 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:15:57,108 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:15:57 BoogieIcfgContainer [2021-12-21 13:15:57,114 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:15:57,115 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:15:57,115 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:15:57,115 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:15:57,116 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:15:43" (3/4) ... [2021-12-21 13:15:57,118 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:15:57,122 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-21 13:15:57,122 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:15:57,122 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:15:57,122 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:15:57,122 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:15:57,122 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-21 13:15:57,123 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:15:57,123 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:15:57,123 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:15:57,123 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-21 13:15:57,133 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-21 13:15:57,134 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:15:57,134 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:15:57,134 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:15:57,135 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:15:57,135 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:15:57,135 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:15:57,150 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-21 13:15:57,151 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-21 13:15:57,151 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2021-12-21 13:15:57,152 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-21 13:15:57,152 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-21 13:15:57,153 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2021-12-21 13:15:57,153 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical <= 0)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || (((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || waterLevel <= \old(waterLevel)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-21 13:15:57,154 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result == 1) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result <= 1)) && (((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-21 13:15:57,154 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((((((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel <= 1) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0)))) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || ((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0))) && 1 <= tmp) && \result == 0)) [2021-12-21 13:15:57,154 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) [2021-12-21 13:15:57,154 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2021-12-21 13:15:57,155 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) [2021-12-21 13:15:57,155 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2021-12-21 13:15:57,155 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2021-12-21 13:15:57,157 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && \result == 0) || !(\old(pumpRunning) == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) [2021-12-21 13:15:57,157 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-21 13:15:57,188 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:15:57,188 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:15:57,189 INFO L158 Benchmark]: Toolchain (without parser) took 14403.37ms. Allocated memory was 96.5MB in the beginning and 192.9MB in the end (delta: 96.5MB). Free memory was 65.9MB in the beginning and 143.9MB in the end (delta: -78.0MB). Peak memory consumption was 19.5MB. Max. memory is 16.1GB. [2021-12-21 13:15:57,189 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 96.5MB. Free memory was 53.8MB in the beginning and 53.8MB in the end (delta: 36.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:15:57,189 INFO L158 Benchmark]: CACSL2BoogieTranslator took 400.59ms. Allocated memory was 96.5MB in the beginning and 127.9MB in the end (delta: 31.5MB). Free memory was 65.5MB in the beginning and 95.8MB in the end (delta: -30.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-21 13:15:57,190 INFO L158 Benchmark]: Boogie Procedure Inliner took 66.66ms. Allocated memory is still 127.9MB. Free memory was 95.2MB in the beginning and 93.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:57,190 INFO L158 Benchmark]: Boogie Preprocessor took 40.97ms. Allocated memory is still 127.9MB. Free memory was 93.1MB in the beginning and 91.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:57,190 INFO L158 Benchmark]: RCFGBuilder took 423.36ms. Allocated memory is still 127.9MB. Free memory was 91.0MB in the beginning and 73.2MB in the end (delta: 17.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-21 13:15:57,191 INFO L158 Benchmark]: TraceAbstraction took 13392.35ms. Allocated memory was 127.9MB in the beginning and 192.9MB in the end (delta: 65.0MB). Free memory was 72.7MB in the beginning and 151.2MB in the end (delta: -78.5MB). Peak memory consumption was 91.9MB. Max. memory is 16.1GB. [2021-12-21 13:15:57,191 INFO L158 Benchmark]: Witness Printer took 73.68ms. Allocated memory is still 192.9MB. Free memory was 151.2MB in the beginning and 143.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-21 13:15:57,193 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 96.5MB. Free memory was 53.8MB in the beginning and 53.8MB in the end (delta: 36.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 400.59ms. Allocated memory was 96.5MB in the beginning and 127.9MB in the end (delta: 31.5MB). Free memory was 65.5MB in the beginning and 95.8MB in the end (delta: -30.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 66.66ms. Allocated memory is still 127.9MB. Free memory was 95.2MB in the beginning and 93.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 40.97ms. Allocated memory is still 127.9MB. Free memory was 93.1MB in the beginning and 91.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 423.36ms. Allocated memory is still 127.9MB. Free memory was 91.0MB in the beginning and 73.2MB in the end (delta: 17.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 13392.35ms. Allocated memory was 127.9MB in the beginning and 192.9MB in the end (delta: 65.0MB). Free memory was 72.7MB in the beginning and 151.2MB in the end (delta: -78.5MB). Peak memory consumption was 91.9MB. Max. memory is 16.1GB. * Witness Printer took 73.68ms. Allocated memory is still 192.9MB. Free memory was 151.2MB in the beginning and 143.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 111 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.3s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3376 SdHoareTripleChecker+Valid, 3.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3345 mSDsluCounter, 5613 SdHoareTripleChecker+Invalid, 2.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4019 mSDsCounter, 1540 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5500 IncrementalHoareTripleChecker+Invalid, 7040 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1540 mSolverCounterUnsat, 1594 mSDtfsCounter, 5500 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 654 GetRequests, 429 SyntacticMatches, 6 SemanticMatches, 219 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2969 ImplicationChecksByTransitivity, 1.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=906occurred in iteration=9, InterpolantAutomatonStates: 192, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 166 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 2597 PreInvPairs, 2945 NumberOfFragments, 2334 HoareAnnotationTreeSize, 2597 FomulaSimplifications, 2998 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 51 FomulaSimplificationsInter, 17436 FormulaSimplificationTreeSizeReductionInter, 4.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 827 NumberOfCodeBlocks, 827 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 919 ConstructedInterpolants, 0 QuantifiedInterpolants, 2244 SizeOfPredicates, 7 NumberOfNonLiveVariables, 885 ConjunctsInSsa, 30 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 96/135 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 547]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result == 1) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result <= 1)) && (((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 561]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 701]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && \result == 0) || !(\old(pumpRunning) == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical <= 0)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || (((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || waterLevel <= \old(waterLevel)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((((((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel <= 1) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0)))) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || ((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0))) && 1 <= tmp) && \result == 0)) - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 592]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 931]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 470]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 992]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 770]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) RESULT: Ultimate proved your program to be correct! [2021-12-21 13:15:57,242 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE